last executing test programs: 56.670456882s ago: executing program 1 (id=2): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004b001300000008024c0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r3, &(0x7f0000000640)={@void, @void, @ipv6=@dccp_packet={0x4, 0x6, "9ea078", 0x10, 0x21, 0x1, @mcast2, @loopback, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x2, 0x2, "992427", 0x3, "caa048"}}}}}, 0x38) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x34) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000000514010026bd7000fbdbdf25080001000200000000000000000007ae0800010002000000080003000100000008000100000000000800030003000000080001000200000008000300010000008dcd4da4258bc58694a51f92a4bf31fdf645cd04b6d0"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000002"], 0x114}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x64, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@remote, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@enum64={0xb, 0x2, 0x0, 0x13, 0x1, 0x4, [{0x9, 0x5, 0x12}, {0x4, 0x3, 0x6}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x2, 0x5}, {0xc, 0x1}]}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @fwd={0xd}, @union={0xe, 0x3, 0x0, 0x5, 0x0, 0x9, [{0xb, 0x1, 0x1}, {0x2, 0x4, 0x7}, {0x0, 0x2, 0x7fc1}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000380)=""/64, 0xe0, 0x40, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xd, 0x400, 0x8040, r7, 0xe1bf, '\x00', r8, r9, 0x1, 0x3, 0x3, 0xd, @value=r10, @void, @void, @value}, 0x50) 53.690229287s ago: executing program 1 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0xcc303, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffd, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='permhat 0000002^\x00'/27], 0x1b) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 50.66872365s ago: executing program 1 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a00)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0xffffffffffffffe9) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcb}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xfc, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000000c0), 0x4) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 50.460901842s ago: executing program 1 (id=25): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0084800b00010062726964676500000c000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 50.37260312s ago: executing program 32 (id=25): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0084800b00010062726964676500000c000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 39.911067029s ago: executing program 0 (id=58): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x1e0, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x1cc, 0x1, [@m_ct={0x12c, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0xea, 0x6, "864e46f3881270cbc875d559bdcbed12e073948e1cb61e35867828e9cb97300f1b8ab3ca52e458eb286a80196438be90c090ce2fd59925b034f2bc3c29e06b308abde0b45182087848735b9708f22fec0a6a40a380ff1bb294f5ca6794f38d4119455da17b177ffc04ad8bf89d5273eb9a26566e1f24cb45fcdc49c099ce1521c4ed8ea7b8a8528c1ec86762e30a781ef3c87ba1e16612a38c0c54f30614fe71dd966b7c90dc3fa5085ff41a41b6194e13f47b1d5a0100071c9d2fb0b8dd01fe6b22a4c21d1d9fc18f846b096e0e91003ba5699e73447c0cd93f87d33340374151edcd778538"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x9c, 0xf, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x8, 0x10000000, 0x3, 0x80000000}}]}, {0x5b, 0x6, "92c5e92e208d3b24ba0e6f662eac684a98ef0fe5512236cb7aceeed2291b2feadb3197cc0aa8e7714b1862c5e33f8a76abaeebaaef6c2813f8ca5d58b6d1f8e69228001e4dd644e4e63c1236ef36a2a589281d50817ee5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707d, 0x0, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000001240)={'IDLETIMER\x00'}, &(0x7f0000001280)=0x1e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x8d}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9b", 0x64}, {&(0x7f0000000c80)="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", 0x1fa}], 0x3}}], 0x1, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001340)="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", 0xfffffffffffffdc0, 0x40040011, 0x0, 0x5a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @private=0xac1414bb}}}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) 38.865050934s ago: executing program 0 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x0, 0x4, 0x63, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7, 0x8000, 0x0, 0x6}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, 0x0, 0x3b) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) getdents64(r2, &(0x7f0000000000)=""/2, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @private=0xa010100}, 0x10) sendmsg$nl_route_sched(r3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) fsopen(&(0x7f0000000040)='dax\x00', 0x1) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000180)="3f030e000a0012002c001e0089e9", 0xe, 0x2, &(0x7f0000000200)={0x11, 0x1, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c656e65766500000000028008000200000000001400030067656e6576653100"/56], 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000000000800050040"], 0xe0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 38.660722615s ago: executing program 0 (id=64): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000006c0)=@known='user.syz\x00') syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) epoll_wait(r7, &(0x7f0000000240)=[{}], 0x1, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000980)='WW', 0x2}], 0x1) pipe(&(0x7f0000000380)) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f00000003c0)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200000}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000340)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) 37.573406179s ago: executing program 0 (id=66): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80045b09, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r8, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOCK(r8, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) 34.204157608s ago: executing program 0 (id=77): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x426440, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x8, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x4, 0x0, r1}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x4719, 0x2, 0x0, 0xa4, 0x2}, 0x14) listen(r3, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) sendto$inet(r4, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 33.264467182s ago: executing program 0 (id=91): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/133, 0x85}], 0xa, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x2e, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000008000000000f8ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000ec2464f1027dd5ff00008500000083000000bf09000000000000550901000000000095000000000000008520000005000000183b000003000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000182b0000", @ANYRES32=r3, @ANYBLOB="00000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000006580600000800001800000099000000000000000300000018340000040000000000000000000000182a0000", @ANYRES32=r3, @ANYBLOB="000000000b00000018400000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r10, 0x5000, 0x0) 18.229573637s ago: executing program 33 (id=91): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/133, 0x85}], 0xa, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000080)=[0x5, 0xa22], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x2e, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000008000000000f8ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000ec2464f1027dd5ff00008500000083000000bf09000000000000550901000000000095000000000000008520000005000000183b000003000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000182b0000", @ANYRES32=r3, @ANYBLOB="00000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000006580600000800001800000099000000000000000300000018340000040000000000000000000000182a0000", @ANYRES32=r3, @ANYBLOB="000000000b00000018400000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$dsp(r10, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r10, 0x5000, 0x0) 9.631860813s ago: executing program 4 (id=194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) setreuid(0xffffffffffffffff, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c0000000000850000338c0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) io_uring_setup(0x7f06, &(0x7f0000000080)={0x0, 0x4, 0x82, 0x80000, 0x0, 0x0, r1}) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4801) r7 = userfaultfd(0x801) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = syz_usbip_server_init(0x4) write$usbip_server(r8, &(0x7f0000000980)=@ret_submit={{0x3, 0x9, 0x0, 0x1, 0x9}, 0x3, 0x0, 0x401, 0x0, 0x18}, 0x30) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000001300)={'mangle\x00'}, &(0x7f0000000140)=0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r11, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7759}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x20048004) 8.399385461s ago: executing program 4 (id=197): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4bfb, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) 8.398940795s ago: executing program 4 (id=198): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) getresuid(0x0, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f0000000480)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="900000", @ANYRES16=r3, @ANYBLOB="01f829bd7001fcdbdf2501000000080001", @ANYRES32=r4, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001800000"], 0x90}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x4, 0x0, 0x1c, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8, 0x80, 0x80000000, 0x7}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70040000", @ANYRES16=r3, @ANYBLOB="040029bd7000ffdbdf250300000008000100", @ANYRES32=r0, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000b00000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c9d3ffff080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r0, @ANYBLOB="d80002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r0, @ANYBLOB="40010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040081000f283407090000000000000000000a002f000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="f40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004001000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB], 0x470}, 0x1, 0x0, 0x0, 0x44894}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = socket(0x1e, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') io_setup(0x6, &(0x7f0000001380)) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r9 = socket(0x1e, 0x4, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32, @ANYBLOB="a5476710b11d5d8003d94920897a4173bd48f23ec374b489b10635e7b6bcbab4b073c2f3752b5019cee9eccbfe1980c2711e50bc814071c19b382c1b494adddc6349ed224e6afce04317654154931719761e4ccffab708961a3640e2de1eb6a521fb525c825671"], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r13, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200088d5) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.228111183s ago: executing program 4 (id=202): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4000c000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$tun(0xffffff9c, 0x0, 0x2401, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x400, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/223, &(0x7f0000000180)=0xdf) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r2, 0x0, 0x578410eb) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040804"], 0x7) r6 = io_uring_setup(0x310f, &(0x7f0000000240)={0x0, 0x5f98, 0x80, 0xffffffff, 0x2000}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) close_range(r6, 0xffffffffffffffff, 0x0) 6.938462848s ago: executing program 4 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0xcc303, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffd, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='permhat 0000002^\x00'/27], 0x1b) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4.860252606s ago: executing program 2 (id=217): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80045b09, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f400000000000000"]) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r8, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOCK(r8, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) 3.816990309s ago: executing program 4 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x0, 0x4, 0x63, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7, 0x8000, 0x0, 0x6}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, 0x0, 0x3b) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) getdents64(r2, &(0x7f0000000000)=""/2, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @private=0xa010100}, 0x10) sendmsg$nl_route_sched(r3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) fsopen(&(0x7f0000000040)='dax\x00', 0x1) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000180)="3f030e000a0012002c001e0089e9", 0xe, 0x2, &(0x7f0000000200)={0x11, 0x1, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c656e65766500000000028008000200000000001400030067656e6576653100"/56], 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000000000800050040"], 0xe0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.66856455s ago: executing program 5 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='w', 0x1}, {&(0x7f0000000380)="fef0e4dfa6bfea528b0c3c312b552596768813bb3248c339c2435b313bcaa4e7341c52c4ea2aad13a42b12d688401a7d1d5897e4b499b98ab7476eac9610069c083a5ada5e66bf5fc5536404536a22aa2a4b8faac90ea9590cb22bbf296236ff0a56ea3191aaea810a0e1dc2514c45f316602eb2224969f2d36db2f9564f11de5ed4487abf575e7786daea568c8daf5bf8984261172f91061f070710abf3bf9baa6d2ef8b9dd8723144b2143905a24da95dc018b4769a20e19bc91dfba32281b1a8bdef06064722605ec824c4e05adf660cb1a11d1052c4ca328237c8aca29857e909c3318cf81dc4e77160b59fe76c94837bdd6eb83734b1a13022127be7d52db954a2f80791b5620716775f764d908b79ebdbd02dcd5fb4d133085f4101c9af609ca9f56b08aaf3f622c87c2e7c77d3efeaf122dd6a5e8b9905d187f5b868fc6648c91aaef2831de7da3022140362902b92aa5b3a66d4b13cadb3d8df7bf7b91dea26a1705382e690e22c4331b09a7087837570151cdb38426341fb1a73bbae80209b35dd32a84b9dc316dd878821e11e14ecb7f6ea9c72f91f6c1e39e30cfc1532d53f8cf8ffa7feda278644136171765a5f1fbe1938b063fd3b25e0704b5c85c9e22318bb5aa1136e41cae4df622e15c690fda4b189e2550bd26d261b3bff75799a573b476a83c538e040bdcf1c2006e080f395358f82de382db6fbd38f9a60ca431de2f8cb445d97127897c65f601488550b4b4898f3e86294e2dcec96c7f0ed6717cdccf9b266564dfaf3dfa8605aa88d8a12ce09b5abd8ba66914a78c90b318242afd1890c16f38191f8956586046b8ad56f1571c4ee5a5493198463519e798d0649df8f95750fb0692b38d3504a499d4b3da3ffb72c53f5e8fd8023ec35b3c2182af6571de97fcbd60cc25581280e6bd4c175ee2cc2888c77edf158b596bbcad313ece6f1b94954a2b05485a1b50fdf761a2299badabaccbdb9a41406d0297379ce5639e99240224fea3fb1b16f70fc06c9b7d8818c3303a6cc02c54f629d7286739c39f7910a749b481bdac573ab8b1d404bb96b0436439f8ca789c302f66c2ecc1776d434f2713359398cdd6a898ec9a803ea570d6b82b59b1987f82e039e6b426db8e7bc0d27854dbc52a389a20a876a92972c34ae1efaad9c37917a2dea0a723092f1270c9e4a4e0ddefc34d8904a89d4833a4c39060d79ddb31eeab7539267148788eb65a9dad0aa0fed3d7a49bad3a99450c88d6f016af4d843fce44f0853d897e5d9e4c01455656413c736e69f827981f023baf7c18e65becbc9f1191ad75483d5f6f2aa908b509184483106f539e89e139f6d12341ea81d938bdbb14fc99d093aad070e0e7e54249b8a55998896998e7c4ce44b3cc395de31e20aa6d93962037644a3109b3efdf3d3645f456971000f23070d18ae7e4517fff858db08164ff3b8352bcc87b2ee28f01d62162a3804d7dac1601851b3a49612a74cbca77502b4fdc54f3677950d379dcebef1332cdc500df39e7a5da089abc81d240935ced5165c6524fedcb9b9bc4e81fb118f4001b3712944b38a2ddda84fc687e683435528e0c15eb19dd3c93dd7973fc2aedb00086feb804886b7777200caa4920787cd6bfab7168852d1136532fc7a6e51d66d8e43be945b615ece3e6f45597986610b8598e3b54ce056e3fbc32754c67830492972205b95b424fea23ffdd54750d4b97e13235fc64d6cf20867ed2916fef3b954258ea2effb9e92305a5f4c6db48eedb767fc18ba47ff192706305def784f179ec5fed11afe8c97a39a9f3f22595657f1b87c6bafd90303f6cd0fd7cee53ab00ace6301e9863bc6f4f92980ebd47061ee7a2af3b002816565f583a353766f4d943130d8f5f28a6a4caa3b414574df56d3e1186829c2798b4f2f63a841497188302a92b8b47b84337ccf44fe29dda6b6d5f863aa881cc3babb02c955419e872dac364c54045cb75bc15bdb25ab150c83f7c47d130596330a2b0ba2c52bfcaa1ef99098c61125ef18b4df50d684e092695ea5405cee996f2dca7337e5a4036af435c1d1e9c2c6ce1a02d68a8af73d8cb7c204e7da26665e24dbefaa37902afa691a46a0825131323535f54c2c217ad78baf2e1a5ec74560f2a6079135dbf03e00dddb22e3da48bdbdd4f0f75978b6dcd2fd85c8a971a64f2e1bfbcb96345c41f47b91158e9fce7120a77298c127988233faa7d5711057da60627f4eb319727dfeee3b5e662073a86fa747f03a7c8ce862c3e8d4416434e08e3db0f980bac674de89dafe21069807817b37784eb06799753075466f406769ad339a215b1851e27e91a7588bfc3bc159dd525f85fcb6a13c2b718582dba959fef9901adc68c7e15c91eb52e760b61feed2382fabfafad1b07b6eb58792dadfab5736da7265c4e245da87fa03e71c77077d80fb2e68e75883d507208387a69ffbe19a164d29c23d9517bd853050ededd035a6843c4f17f86663c16d28d532549778226fba8e07d865df5db265b016139f51eb511acc4d0bc3a9b1807fd4313ca9810c45cdc1a8fff6551de15e5d9694f15e09c112f70905c017aee0ebdc0cb0798884abbfb01b51d669894ab57caefa0abab1cbbc7798602566da4418be2f9ccf75d7a5efb2cba47728c2b9ff4ff0cc9418dcf02bea112e7696f646adfa199bfe5e8b1f4723eb179443a3873fe57c2e5ea65d2b0d3f88c3c0f8cc9b188e8d91274f5105a2fc6c04357d5c4a8b856603a69924d16041382eb54daa437ca9da416f0e45e070f57c7301eb0e277a03171e5c6a9c24f4500c8bc83e4e228220aac7221a36d63cccf00504ba215b34e04ef25157cccfb1523656255984c09ac693f808dbd86bb038e936e206fc977e5ec44b1976d908f4ab1061271b1fba910f2f43de0299d1051e274131957bab4336924b3f800b974cfb5e50c20b3ce807c4bbcb70e10841613df1722006b821422d0e41e67ec4b0dd2a87a6f10473e801fadd9190025bf7a7acb5a93df089ce2e517bed71b07d211e968fae920ce16c2b958f1ee89fe47324782c05aa07bc84e66c7b3a4370f74c36efb62f123c19149797bfec80dde510348fad77b1fc4732bb8c26ed487f4f8b823fe4ced81e41adaeb065e4415792a59c36c616b8904bdb5a14b16bcc968684a0d88ee1a387316d67d16cb441e68bf74d56328b1d6f96ca1ebde1f4948479ccd2e36e3c30763fa436de3a3dfbf1729938793392f800bc7c3140e672da40fb8466ab0aa9b250cc842a493e6fa240414b7ec99d663baf052391ad7626b15f0dc839ec66ab1648b60f32f9c69e2cd99648b11f28e3787f806d38f5a29bf117754480892657d5e173e0f67481a5ba18ee8f3ed4f2ed765ec6e998280e7cf38b6366b3e4a88942ff8109925f9e256e7e063af2b78685f3afee4fc9b23a807cf251076a2d8dfc2d48e8a850e31cf4b2c81ca6fc42418c889b86ce814681caa74299a197dcefc2ee9c406fe0eb18e66320152f3e4de45be79ac830ed9f8d0a0d1e47be9fad553cbdbed6e9d563b0bfca47a5cdb89bf01325570e6152e40fbb5aaf019926c619f373d9faaf489c5f0933f58a1cb93ef7a3a98cc0bb299ce1d0d720d2d2ea70a7f8e0a25439260b92457120317c89d31e1c84b078368741578aca3e75359b8b45559479c187443c74a840f8353a9529f17b6547a3eaef71fc27f5e9a9479af7655e4d0d301b33ccfdbb67d983257d69b0185ed278e23fcacf9b1c9321d33a5f3619f8861957e8c77bec8f9d5c6884eb25ea1ebe9ad440349acda56a154336411858812097f604857dab617533c2355b9fae02e56a3ad56f2503638778e9d183e932810c7398c96ee811dcf33a415e4d762dc3685a6ec15cc88aa6d05123b5cdec7668d8f6f3d67cbe6599e1817c36bbb30f447a43bd46409df430b193ecbd6ebb025f3e7ba5f902c090994fbf4628d44ddbffcb0cb63b6f89978883811c5cae0dcfb1eb3a7f7b9f81233879c66f19b09750992c8dae4de7775eebf7b4d24518c4c193b62dd017f405a9715635b28bce0662c53b33e0452621192cbab5182df36621f1a4ebdab929bfe8197882d1c0de8a6d5ef979616c1a3fc7fc636de9c0880362791b56a33b6e2a61eb5dde909cc7b571c90db9ab056eee3d3b8d659654fb964c32c4cdddce06d2c7a73bb2d6526f3480c8119dd0eba7116ec2d6b9b44b6ba3759f76c660af5704df1c4206b7bed4715f9157e61bc0d7ebebad4069fe2606c6b91d5471fcce5f723708ad1b43eb4c53e0264718b0a600fd2b67faf8fb99c4a7d0583d1294a0634540cc4d68802efefb43ade60cfcec7acd67d332f1472308a72c68403afda15455fcb79db2cf5a30f9f55a8a2c181f08a98e417038560c6efd450f600653120e9731a691c56d6e453bea18a21770c427bf604872ef5c88a5c18a4cbfea8c8c943f650eb6c77e5715970fbeb2601567aafa9708ec5b7d5268d76b0fb322af7d0e6fb0e82ddfe7ccee948822e141edf492f8e4a060837a1bd22d59eb8a94fde78a073f3570c7fac04666fb93d6afbd4fba3ed8a140835dcdc7bd718e083cc19dd9527948460c372e0b8402481869062b7ee211623e153106f4fe69e5aaafded34cb47b7909a8eed95bf0e577a828b231692d27912de0519503a4e510be4d1d3623bc6e909bbd2e573972bab5c267e803c566a8d835373a1408318c40118ed66bc49caa5b1d745f94a9266a94c2befc5a69eefcdd08c1788d46b762ce517df284cd6e337fd2fc6f11bf7e31cf432d5ca3a002c7e33a7e72dc29578b289458108384b848b007c90830c671c155597615ec063bc7f88fc3241c54e558fae921dbb4f8ce2300df5b652de9c960878d617086f45d4ba89d0024f081b0383e50c169d1fa3c6a3ad6131f382244e2852f7ada2418a323e9fa98e5fe267858a07fa168d70f9258413422543c48251c6b077998ebdda15edca63fdcbf217dfd1d9ecb947455e0dd6f40deb208cc66b7779f55b53dc179f008ee900dea6fa823aa4575f6c91420c46353f442b0c9847cf6ae9f28c447928f455a50089a0aaf12218c23173f089472eadefce60e8557c2d4363d4fae57a049eab50baa666b6233bf06bf7d4bdc90f7a9e85cbcc4e126dda9e702240381f8c63e68de8633c99fc66ed1e7cdbfe8f0cf155bca9d61c76cf5712581348b50ec9b7ba15efc10d7e2ea018047177a4202f355ab5f2d55164a3fd3170140d45e771fa3393567d41b2ed8d09de0738f1e25f3dd6e0a6e6a3c6bd8ea55c18581815a84ed2a329bb509bc81926fbbf77e637db1eab178fffb8526371b00951903d196ab449ca174cd03b334cf9da6f6974b8e998cac9dfcbb53b990ee6f7cb0376d3a813df2baea94262652420c8d3d4f44f0bf70c0d95054416b3c0a5a02c5a107ecd204f6a1b20a6e3b127523702d0226c0dad541817e041e0ce72a8a825e86212a06b1001ff3eb0cff3d7d8415008c52c3294393a3e5065740e9ebe7c8f0e668f432158a49e1b069c6379be7044857cff08961fb9725cfa6745588c6c9fb831691c9044c85de959343bd16fffbfd0927fb47b8f000f395473287acb07ca181594edffc2723dc640c7918815119960e4291f6e29fa84727424cfe1c0dfa842381e6193e5be0d687b1c7946d3266551a39ca0a8ca632636236cb01db188597fdaa2b7641add58554e0ee11104cec4a01d204a77a9001df5e86643ac2211e2deaf49737268cd19e8e6b9bf7f1bfc95eaa63c775574101f31cd908bb71bcd6b145e278daaa0", 0xfff}], 0x2, 0x1) close(r1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {}, 0x884d4e09817961eb}, 0x18) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x7f, 0xc}, {0xd31, 0x40, 0x4, 0xfce3, [0xc, 0x8]}}}}, 0x19) 3.410384478s ago: executing program 3 (id=222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x0) 3.410073938s ago: executing program 3 (id=223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x7ffffc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c813}, 0x0) 3.339591859s ago: executing program 3 (id=224): r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) getpeername$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x10) 3.339459202s ago: executing program 3 (id=225): ioctl$TCSETSW(0xffffffffffffffff, 0x4bfb, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) 3.260494925s ago: executing program 3 (id=226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f00002f5000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000004d80)=[{{&(0x7f0000000480), 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000680)=""/212, 0xd4}], 0x4, &(0x7f00000007c0)=""/175, 0xaf}, 0x8}, {{&(0x7f0000000900)=@ax25={{0x3, @bcast}, [@default, @remote, @bcast, @bcast, @netrom, @rose, @remote, @bcast]}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/79, 0x4f}, {&(0x7f0000000b00)=""/108, 0x6c}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x4, &(0x7f0000001b80)=""/147, 0x93}, 0x1}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/88, 0x58}], 0x1}, 0x6e1}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/176, 0xb0}], 0x1}, 0x401}, {{&(0x7f0000001e00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e80)=""/158, 0x9e}, {&(0x7f0000001f40)=""/171, 0xab}, {&(0x7f0000002000)=""/122, 0x7a}], 0x3, &(0x7f00000020c0)=""/217, 0xd9}, 0x6}, {{&(0x7f00000021c0)=@caif=@rfm, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002240)=""/155, 0x9b}, {&(0x7f0000002300)=""/94, 0x5e}, {&(0x7f0000002380)=""/109, 0x6d}, {&(0x7f0000002400)=""/165, 0xa5}, {&(0x7f00000024c0)=""/22, 0x16}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/197, 0xc5}, {&(0x7f0000003600)=""/148, 0x94}], 0x8, &(0x7f0000004e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000004700)=@llc, 0x80, &(0x7f0000004980)=[{&(0x7f0000004780)=""/254, 0xfe}, {0x0}], 0x2}, 0xffffff85}, {{&(0x7f00000049c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004a40)=""/147, 0x93}, {&(0x7f0000004b00)=""/173, 0xad}, {&(0x7f0000004bc0)=""/114, 0x72}, {&(0x7f0000004c40)=""/61, 0x3d}, {&(0x7f0000004c80)=""/9, 0x9}], 0x5, &(0x7f0000004d00)=""/117, 0x75}}], 0x8, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09000000000000550901"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='mptcp_subflow_get_send\x00', r7, 0x0, 0x2}, 0x18) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r8 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [], 0x15, 0x0}, 0x78) ioctl$TCFLSH(r5, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) close(r5) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) socket(0x1e, 0x4, 0x0) 2.629707882s ago: executing program 5 (id=227): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000080002400000000008", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0084800b00010062726964676500000c000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.740435047s ago: executing program 2 (id=228): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d320987f70e06d038e7ff7fc6e5539b3247298b089b070d366e090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setreuid(0xffffffffffffffff, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c0000000000850000338c0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) io_uring_setup(0x7f06, &(0x7f0000000080)={0x0, 0x4, 0x82, 0x80000, 0x0, 0x0, r1}) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4801) r7 = userfaultfd(0x801) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = syz_usbip_server_init(0x4) write$usbip_server(r8, &(0x7f0000000980)=@ret_submit={{0x3, 0x9, 0x0, 0x1, 0x9}, 0x3, 0x0, 0x401, 0x0, 0x18}, 0x30) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000001300)={'mangle\x00'}, &(0x7f0000000140)=0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) 1.680203715s ago: executing program 5 (id=229): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) getresuid(0x0, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f0000000480)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01f829bd7001fcdbdf2501000000080001", @ANYRES32=r4, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001800000"], 0x90}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70040000", @ANYRES16=r3, @ANYBLOB="040029bd7000ffdbdf250300000008000100", @ANYRES32=r0, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000b00000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c9d3ffff080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r0, @ANYBLOB="d80002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r0, @ANYBLOB="40010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040081000f283407090000000000000000000a002f000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="f40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004001000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB], 0x470}, 0x1, 0x0, 0x0, 0x44894}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = socket(0x1e, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') io_setup(0x6, &(0x7f0000001380)) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r8 = socket(0x1e, 0x4, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32, @ANYBLOB="a5476710b11d5d8003d94920897a4173bd48f23ec374b489b10635e7b6bcbab4b073c2f3752b5019cee9eccbfe1980c2711e50bc814071c19b382c1b494adddc6349ed224e6afce04317654154931719761e4ccffab708961a3640e2de1eb6a521fb525c825671"], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r12, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200088d5) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.520387233s ago: executing program 5 (id=230): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x9, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000080002400000000008", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0084800b00010062726964676500000c000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 679.276821ms ago: executing program 2 (id=231): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) removexattr(0x0, 0x0) (async) shmdt(0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x11, r6, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket(0x10, 0x803, 0x0) read$qrtrtun(r6, &(0x7f0000000280)=""/156, 0x9c) (async) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x6, 0x200000}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40841}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r3, @ANYBLOB="80008e0b0a000200aaaaaaaaaaaa000006240500010004007401c6719dc6827f937b6eee033af7f1e48359f02052593f93c839713ada41d71a4d3f774706032250b2"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 679.096569ms ago: executing program 2 (id=232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x0) 677.597668ms ago: executing program 5 (id=233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x7ffffc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c813}, 0x0) 610.408879ms ago: executing program 2 (id=234): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4bfb, 0x0) 610.017344ms ago: executing program 2 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='w', 0x1}, {&(0x7f0000000380)="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", 0xfff}], 0x2, 0x1) close(r1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {}, 0x884d4e09817961eb}, 0x18) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x7f, 0xc}, {0xd31, 0x40, 0x4, 0xfce3, [0xc, 0x8]}}}}, 0x19) 609.734889ms ago: executing program 5 (id=236): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80045b09, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x7fffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000000002"]) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r8, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOCK(r8, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) 0s ago: executing program 3 (id=237): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2801, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000080002400000000008", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a0300000000000000000007000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="08000000000000001c0084800b00010062726964676500000c000280050019"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32852' (ED25519) to the list of known hosts. [ 49.091969][ T5941] cgroup: Unknown subsys name 'net' [ 49.226187][ T5941] cgroup: Unknown subsys name 'cpuset' [ 49.231200][ T5941] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.296921][ T5941] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.022381][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.025526][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.027825][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.030301][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.033559][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.033949][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.034043][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.034612][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.034809][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.035242][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.035481][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.036785][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.049796][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.054578][ T5317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.058031][ T5317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.060250][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.066255][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.068647][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.071389][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.073531][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.274447][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 54.430699][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.433282][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.435440][ T5951] bridge_slave_0: entered allmulticast mode [ 54.437816][ T5951] bridge_slave_0: entered promiscuous mode [ 54.440776][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 54.446930][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 54.477151][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.479109][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.481057][ T5951] bridge_slave_1: entered allmulticast mode [ 54.483451][ T5951] bridge_slave_1: entered promiscuous mode [ 54.581122][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 54.588182][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.614396][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.708031][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.710144][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.712282][ T5956] bridge_slave_0: entered allmulticast mode [ 54.715125][ T5956] bridge_slave_0: entered promiscuous mode [ 54.718134][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.720221][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.722287][ T5956] bridge_slave_1: entered allmulticast mode [ 54.725597][ T5956] bridge_slave_1: entered promiscuous mode [ 54.744331][ T5951] team0: Port device team_slave_0 added [ 54.752079][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.754868][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.757116][ T5961] bridge_slave_0: entered allmulticast mode [ 54.759675][ T5961] bridge_slave_0: entered promiscuous mode [ 54.763377][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.765401][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.767409][ T5961] bridge_slave_1: entered allmulticast mode [ 54.769782][ T5961] bridge_slave_1: entered promiscuous mode [ 54.787829][ T5951] team0: Port device team_slave_1 added [ 54.872382][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.927047][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.931098][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.950903][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.953347][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.960421][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.964126][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.966125][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.968186][ T5965] bridge_slave_0: entered allmulticast mode [ 54.970698][ T5965] bridge_slave_0: entered promiscuous mode [ 54.974673][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.008242][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.010820][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.019498][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.033408][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.035559][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.038113][ T5965] bridge_slave_1: entered allmulticast mode [ 55.041767][ T5965] bridge_slave_1: entered promiscuous mode [ 55.075441][ T5956] team0: Port device team_slave_0 added [ 55.079262][ T5956] team0: Port device team_slave_1 added [ 55.119879][ T5961] team0: Port device team_slave_0 added [ 55.176816][ T5961] team0: Port device team_slave_1 added [ 55.193303][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.196118][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.208270][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.214271][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.252946][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.255691][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.265785][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.271834][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.277234][ T5951] hsr_slave_0: entered promiscuous mode [ 55.279845][ T5951] hsr_slave_1: entered promiscuous mode [ 55.291438][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.294128][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.301437][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.353309][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.355385][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.363307][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.376174][ T5965] team0: Port device team_slave_0 added [ 55.381350][ T5965] team0: Port device team_slave_1 added [ 55.538708][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.541438][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.551065][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.561914][ T5956] hsr_slave_0: entered promiscuous mode [ 55.565725][ T5956] hsr_slave_1: entered promiscuous mode [ 55.568792][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.572099][ T5956] Cannot create hsr debugfs directory [ 55.578147][ T5961] hsr_slave_0: entered promiscuous mode [ 55.580365][ T5961] hsr_slave_1: entered promiscuous mode [ 55.582314][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.585413][ T5961] Cannot create hsr debugfs directory [ 55.593725][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.596313][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.606120][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.807835][ T5965] hsr_slave_0: entered promiscuous mode [ 55.809775][ T5965] hsr_slave_1: entered promiscuous mode [ 55.811485][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.813590][ T5965] Cannot create hsr debugfs directory [ 56.043198][ T5955] Bluetooth: hci2: command tx timeout [ 56.057658][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.069534][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.085638][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.103757][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.122414][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.122813][ T5955] Bluetooth: hci0: command tx timeout [ 56.125486][ T5960] Bluetooth: hci3: command tx timeout [ 56.126046][ T5959] Bluetooth: hci1: command tx timeout [ 56.131997][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.136175][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.147852][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.183211][ T5961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.186978][ T5961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.191582][ T5961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.195743][ T5961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.235787][ T5965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.240607][ T5965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.244815][ T5965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.248782][ T5965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.306713][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.328660][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.347085][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.349946][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.363410][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.366201][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.385824][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.401234][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.420782][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.427639][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.429899][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.434341][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.444004][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.446565][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.448375][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.452135][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.453964][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.460787][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.462586][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.490487][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.511014][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.513068][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.524663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.526725][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.581647][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.611288][ T5951] veth0_vlan: entered promiscuous mode [ 56.617400][ T5951] veth1_vlan: entered promiscuous mode [ 56.630334][ T5951] veth0_macvtap: entered promiscuous mode [ 56.636000][ T5951] veth1_macvtap: entered promiscuous mode [ 56.651755][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.660314][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.664995][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.674480][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.679331][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.681902][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.685494][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.687928][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.692343][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.727813][ T5965] veth0_vlan: entered promiscuous mode [ 56.735277][ T5961] veth0_vlan: entered promiscuous mode [ 56.743590][ T5965] veth1_vlan: entered promiscuous mode [ 56.757488][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.760883][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.766280][ T5961] veth1_vlan: entered promiscuous mode [ 56.785305][ T5956] veth0_vlan: entered promiscuous mode [ 56.789011][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.791268][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.792970][ T5965] veth0_macvtap: entered promiscuous mode [ 56.801328][ T5965] veth1_macvtap: entered promiscuous mode [ 56.805132][ T5956] veth1_vlan: entered promiscuous mode [ 56.816115][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.819076][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.822504][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.831850][ T5961] veth0_macvtap: entered promiscuous mode [ 56.835684][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.838631][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.842233][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.848303][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.848306][ T5965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.848334][ T5965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.858466][ T5965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860991][ T5965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.867602][ T5961] veth1_macvtap: entered promiscuous mode [ 56.885981][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.889662][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.894068][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.897543][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.901028][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.907070][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.908613][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.912521][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.916587][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.920235][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.924229][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.931967][ T5956] veth0_macvtap: entered promiscuous mode [ 56.936092][ T5961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.938530][ T5961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.940989][ T5961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.943580][ T5961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.947695][ T5956] veth1_macvtap: entered promiscuous mode [ 56.962077][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.965472][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.968264][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.971179][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.974310][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.977258][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.980835][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.987939][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.990841][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.993991][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.997079][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999751][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.002843][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.006212][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.010407][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.013712][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.016169][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.018593][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.023781][ T6018] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.733855][ T6015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.736925][ T6015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.742914][ T6015] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.745597][ T6015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.747305][ T6015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.749777][ T6015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.752446][ T6015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.754230][ T6015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.756534][ T6015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.758868][ T6015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.760615][ T6015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.762960][ T6015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.781807][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.784997][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.796362][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.799249][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.812556][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.815462][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.825263][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.828111][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.833740][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.836346][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.858681][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.861878][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.149077][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.151685][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.159306][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.161827][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.176485][ T6037] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.179206][ T6037] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.181657][ T6037] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.184298][ T6037] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.190504][ T6037] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.193063][ T6037] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.195562][ T6037] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.198022][ T6037] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.243699][ T6036] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5'. [ 58.291955][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.366934][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.383930][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.390585][ T6039] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.393229][ T6039] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.394858][ T6037] Zero length message leads to an empty skb [ 58.395730][ T6039] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.400724][ T6039] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.413593][ T6039] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.417018][ T6039] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.420133][ T6039] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.423265][ T6039] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.883236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.003198][ T5960] Bluetooth: hci0: command 0x040f tx timeout [ 59.160229][ T6053] tipc: Started in network mode [ 59.161694][ T6053] tipc: Node identity ac14140f, cluster identity 4711 [ 59.164517][ T6053] tipc: New replicast peer: 255.255.255.255 [ 59.166758][ T6053] tipc: Enabled bearer , priority 10 [ 59.812755][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 59.812862][ T5317] Bluetooth: hci2: command 0x040f tx timeout [ 59.814010][ T5960] Bluetooth: hci3: command 0x040f tx timeout [ 59.814042][ T5960] Bluetooth: hci1: command 0x040f tx timeout [ 59.814135][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 59.978042][ T40] audit: type=1400 audit(1744395286.163:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6059 comm="syz.1.10" [ 60.022868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.044643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.233217][ T6071] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.235879][ T6071] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.238850][ T6071] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.241992][ T6071] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.278565][ T6071] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.281160][ T6071] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.283478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.284305][ T6071] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.290350][ T6071] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.432411][ T5996] tipc: Node number set to 2886997007 [ 60.435467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.492808][ T6016] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.672733][ T6016] usb 8-1: Using ep0 maxpacket: 8 [ 60.677202][ T6016] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.682315][ T6016] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.685192][ T6016] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.687869][ T6016] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.691565][ T6016] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.703111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.705609][ T6016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.844211][ T6074] bridge0: port 3(syz_tun) entered blocking state [ 60.846368][ T6074] bridge0: port 3(syz_tun) entered disabled state [ 60.848356][ T6074] syz_tun: entered allmulticast mode [ 60.850932][ T6074] syz_tun: entered promiscuous mode [ 60.853461][ T6074] bridge0: port 3(syz_tun) entered blocking state [ 60.855602][ T6074] bridge0: port 3(syz_tun) entered forwarding state [ 61.092817][ T5317] Bluetooth: hci0: command 0x040f tx timeout [ 61.099278][ T5317] Bluetooth: hci3: unexpected event for opcode 0x200f [ 61.752737][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.813125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.882972][ T5317] Bluetooth: hci1: command 0x040f tx timeout [ 61.892717][ T5317] Bluetooth: hci2: command 0x040f tx timeout [ 61.912742][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 61.917650][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.920363][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.923163][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.925870][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.929451][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.933012][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.327902][ T6096] __nla_validate_parse: 4 callbacks suppressed [ 62.327981][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 62.332267][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 62.341387][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 62.358761][ T6096] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.361228][ T6096] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.363751][ T6096] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.366252][ T6096] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.373051][ T6096] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.375534][ T6096] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.378174][ T6096] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.380625][ T6096] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.015814][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23'. [ 63.027869][ T6100] lo: entered promiscuous mode [ 63.030229][ T6100] lo: entered allmulticast mode [ 63.032343][ T6100] lo: left allmulticast mode [ 63.034961][ T6100] lo: left promiscuous mode [ 63.119382][ T1179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.133639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.137448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.165878][ T6016] usb 8-1: usb_control_msg returned -71 [ 63.168489][ T6016] usbtmc 8-1:16.0: can't read capabilities [ 63.201797][ T1179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.292349][ T6016] usb 8-1: USB disconnect, device number 2 [ 63.293492][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.299759][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.305653][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.313320][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.315859][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.333011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.333991][ T1179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.389128][ T6111] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 63.454131][ T6111] bond1 (unregistering): Released all slaves [ 63.476022][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27'. [ 63.484586][ T1179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.689126][ T1179] bridge_slave_1: left allmulticast mode [ 63.698519][ T1179] bridge_slave_1: left promiscuous mode [ 63.715024][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.738950][ T1179] bridge_slave_0: left allmulticast mode [ 63.740767][ T1179] bridge_slave_0: left promiscuous mode [ 63.745851][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.962704][ T5959] Bluetooth: hci1: command 0x040f tx timeout [ 63.963207][ T5317] Bluetooth: hci2: command 0x040f tx timeout [ 64.222428][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.240943][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.251637][ T1179] bond0 (unregistering): Released all slaves [ 64.277400][ T6106] chnl_net:caif_netlink_parms(): no params data found [ 64.386191][ T6122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.388077][ T6122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.390077][ T6122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.393438][ T6122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.395210][ T6122] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.411406][ T6122] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.438253][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.440240][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.442241][ T6106] bridge_slave_0: entered allmulticast mode [ 64.445355][ T6106] bridge_slave_0: entered promiscuous mode [ 64.448588][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.451714][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.454850][ T6106] bridge_slave_1: entered allmulticast mode [ 64.457295][ T6106] bridge_slave_1: entered promiscuous mode [ 64.493019][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.497335][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.548789][ T6106] team0: Port device team_slave_0 added [ 64.553896][ T29] usb 7-1: usb_control_msg returned -71 [ 64.556125][ T29] usbtmc 7-1:16.0: can't read capabilities [ 64.573559][ T29] usb 7-1: USB disconnect, device number 2 [ 64.707955][ T6106] team0: Port device team_slave_1 added [ 64.856959][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.859217][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.893149][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.897066][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.899095][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.910503][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.925410][ T1179] hsr_slave_0: left promiscuous mode [ 64.927675][ T1179] hsr_slave_1: left promiscuous mode [ 64.931659][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.933883][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.946832][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.956248][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.977051][ T1179] veth1_macvtap: left promiscuous mode [ 64.978766][ T1179] veth0_macvtap: left promiscuous mode [ 64.980410][ T1179] veth1_vlan: left promiscuous mode [ 64.981978][ T1179] veth0_vlan: left promiscuous mode [ 65.475683][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 65.522309][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 65.729308][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.738768][ T6154] dns_resolver: Unsupported server list version (0) [ 65.880826][ C2] Unknown status report in ack skb [ 65.919813][ T6106] hsr_slave_0: entered promiscuous mode [ 65.922056][ T6106] hsr_slave_1: entered promiscuous mode [ 66.005861][ T64] tipc: Subscription rejected, illegal request [ 66.013014][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.064894][ T6106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.069540][ T6106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.073950][ T6106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.083405][ T6106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.123188][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.135670][ T6106] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.140319][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.142330][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.150970][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.154010][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.177447][ T63] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.181318][ T63] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.187536][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.190332][ T6106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.190941][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.196938][ T63] usb 5-1: Product: syz [ 66.198625][ T63] usb 5-1: Manufacturer: syz [ 66.200610][ T63] usb 5-1: SerialNumber: syz [ 66.275608][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.400339][ T6106] veth0_vlan: entered promiscuous mode [ 66.410176][ T6106] veth1_vlan: entered promiscuous mode [ 66.410941][ T6154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.424325][ T6106] veth0_macvtap: entered promiscuous mode [ 66.427957][ T6106] veth1_macvtap: entered promiscuous mode [ 66.435193][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.438258][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.440978][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.443396][ T5959] Bluetooth: hci0: command 0x041b tx timeout [ 66.444153][ T5317] Bluetooth: hci3: command 0x040f tx timeout [ 66.446084][ T5959] Bluetooth: hci2: command 0x040f tx timeout [ 66.447467][ T5317] Bluetooth: hci1: command 0x040f tx timeout [ 66.448117][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.453934][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.457274][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.474014][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.481074][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.484102][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.487288][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.490142][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.493253][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.496209][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.500514][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.500524][ T6190] openvswitch: netlink: Message has 744 unknown bytes. [ 66.505488][ T6106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.508000][ T6106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510440][ T6106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.515647][ T6106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.565980][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.571317][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.590401][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.594360][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.023295][ T6154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.080237][ T6227] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 67.092906][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.104151][ T6227] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 67.226757][ T63] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 67.229974][ T63] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 67.238914][ T63] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 67.418239][ T6198] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.427542][ T63] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 67.451595][ T63] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 67.467355][ T63] wwan wwan0: port wwan0mbim0 attached [ 67.485521][ T63] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 67.629163][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 67.631099][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 67.632982][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 67.634824][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 67.636654][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 67.638428][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 67.640378][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 67.642217][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 67.644185][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 67.646024][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 67.648422][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 67.657643][ T6120] usb 5-1: USB disconnect, device number 2 [ 67.658060][ T6227] syz.4.26 (6227) used greatest stack depth: 19304 bytes left [ 67.659832][ T6120] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 67.742846][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 67.745341][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.40'. [ 67.748497][ T6120] wwan wwan0: port wwan0mbim0 disconnected [ 67.751266][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 68.009431][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.032704][ T5996] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.192679][ T5996] usb 7-1: Using ep0 maxpacket: 32 [ 68.197993][ T5996] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 68.205785][ T5996] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.208385][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.210726][ T5996] usb 7-1: Product: syz [ 68.211989][ T5996] usb 7-1: Manufacturer: syz [ 68.213640][ T5996] usb 7-1: SerialNumber: syz [ 68.217321][ T5996] usb 7-1: config 0 descriptor?? [ 68.219828][ T6254] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.222461][ T5996] hub 7-1:0.0: bad descriptor, ignoring hub [ 68.224289][ T5996] hub 7-1:0.0: probe with driver hub failed with error -5 [ 68.462731][ T836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.522848][ T5959] Bluetooth: hci1: command 0x040f tx timeout [ 68.522862][ T5317] Bluetooth: hci3: command 0x040f tx timeout [ 68.532882][ T5959] Bluetooth: hci2: command 0x040f tx timeout [ 68.623317][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 68.628231][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.632533][ T836] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.636469][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.643283][ T836] usb 5-1: config 0 descriptor?? [ 68.863385][ T836] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 69.061689][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 69.173390][ T5952] raw-gadget.0 gadget.2: failed to queue suspend event [ 69.242738][ T6254] raw-gadget.0 gadget.2: failed to queue resume event [ 69.263430][ T5952] raw-gadget.0 gadget.2: failed to queue suspend event [ 69.265594][ T836] usb 5-1: USB disconnect, device number 3 [ 69.281159][ T6271] raw-gadget.0 gadget.2: failed to queue disconnect event [ 69.293556][ T5993] usb 7-1: USB disconnect, device number 3 [ 70.013303][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 70.015832][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'. [ 70.021907][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 70.038572][ T6285] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.041006][ T6285] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.043794][ T6285] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.046198][ T6285] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.049771][ T5317] Bluetooth: hci4: command 0x1003 tx timeout [ 70.052156][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.057624][ T6285] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.060707][ T6285] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.063477][ T6285] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.065963][ T6285] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.612991][ T5955] Bluetooth: hci3: command 0x040f tx timeout [ 70.768411][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.770474][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.007644][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 71.011150][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 71.022838][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 71.083052][ T5959] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.084796][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 71.356338][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 71.648646][ T6293] capability: warning: `syz.4.48' uses 32-bit capabilities (legacy support in use) [ 71.792552][ T6292] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.550128][ T24] IPVS: starting estimator thread 0... [ 72.652786][ T6303] IPVS: using max 43 ests per chain, 103200 per kthread [ 72.683105][ T5959] Bluetooth: hci3: command 0x040f tx timeout [ 72.695179][ T6306] tipc: Enabled bearer , priority 10 [ 73.024386][ T6314] __nla_validate_parse: 3 callbacks suppressed [ 73.024396][ T6314] netlink: 3 bytes leftover after parsing attributes in process `syz.3.53'. [ 73.028909][ T6314] 0ªX¹¦À: renamed from caif0 [ 73.044506][ T6314] 0ªX¹¦À: entered allmulticast mode [ 73.046168][ T6314] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 73.089714][ T5996] kernel read not supported for file /dsp (pid: 5996 comm: kworker/1:3) [ 73.450936][ T6324] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 73.457442][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 73.496833][ T6326] ALSA: mixer_oss: invalid OSS volume '' [ 73.839446][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 73.841971][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.57'. [ 73.847320][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 73.858970][ T6339] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.861412][ T6339] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.863864][ T6339] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.866254][ T6339] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.871899][ T6339] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.874650][ T6339] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.877099][ T6339] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.879538][ T6339] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.896799][ T6337] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 74.005268][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 74.007724][ T6343] bridge_slave_1: left allmulticast mode [ 74.009502][ T6343] bridge_slave_1: left promiscuous mode [ 74.012013][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.018669][ T6343] bridge_slave_0: left allmulticast mode [ 74.020281][ T6343] bridge_slave_0: left promiscuous mode [ 74.021956][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.593582][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 74.724525][ T6355] dvmrp0: entered allmulticast mode [ 74.756998][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.62'. [ 74.915908][ T6365] overlay: Unknown parameter 'appraise_type' [ 74.925471][ T5955] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 76.267932][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c92c000: rx timeout, send abort [ 76.282854][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.365410][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 76.368516][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.68'. [ 76.397747][ T6390] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.400327][ T6390] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.403572][ T6390] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.406908][ T6390] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.415813][ T6390] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.418312][ T6390] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.420824][ T6390] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.423470][ T6390] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.432788][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 76.436215][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.438972][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.441731][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.445678][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.449393][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.452000][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.532710][ T5998] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.768308][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c92d800: rx timeout, send abort [ 76.771251][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c92c000: abort rx timeout. Force session deactivation [ 76.802679][ T5998] usb 9-1: Using ep0 maxpacket: 8 [ 76.806818][ T5998] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.809522][ T5998] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.812400][ T5998] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.815488][ T5998] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.819080][ T5998] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.821604][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.104775][ T40] audit: type=1326 audit(1744395303.293:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 77.112529][ T40] audit: type=1326 audit(1744395303.293:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 77.120728][ T40] audit: type=1326 audit(1744395303.293:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 77.129574][ T40] audit: type=1326 audit(1744395303.293:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 77.135942][ T40] audit: type=1326 audit(1744395303.293:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 77.141920][ T40] audit: type=1326 audit(1744395303.293:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 77.149505][ T40] audit: type=1326 audit(1744395303.293:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91598 code=0x7ffc0000 [ 77.155463][ T40] audit: type=1326 audit(1744395303.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91598 code=0x7ffc0000 [ 77.161302][ T40] audit: type=1326 audit(1744395303.293:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91598 code=0x7ffc0000 [ 77.170867][ T40] audit: type=1326 audit(1744395303.293:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.2.71" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f91598 code=0x7ffc0000 [ 77.270525][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c92e400: rx timeout, send abort [ 77.279004][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c92e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.283544][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c92d800: abort rx timeout. Force session deactivation [ 77.336027][ T6400] tipc: Started in network mode [ 77.337492][ T6400] tipc: Node identity 4, cluster identity 4711 [ 77.339267][ T6400] tipc: Node number set to 4 [ 77.427741][ T6397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.500206][ T6404] dvmrp0: entered allmulticast mode [ 78.566041][ T6436] __nla_validate_parse: 3 callbacks suppressed [ 78.566132][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 78.578620][ T6438] overlay: Unknown parameter 'appraise_type' [ 78.582473][ T5955] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 79.303155][ T24] usb 5-1: usb_control_msg returned -71 [ 79.304807][ T24] usbtmc 5-1:16.0: can't read capabilities [ 79.317323][ T24] usb 5-1: USB disconnect, device number 4 [ 79.328705][ T5998] usb 9-1: usb_control_msg returned -71 [ 79.336318][ T5998] usbtmc 9-1:16.0: can't read capabilities [ 79.353960][ T5998] usb 9-1: USB disconnect, device number 2 [ 79.504964][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 79.507829][ T6465] bridge_slave_1: left allmulticast mode [ 79.509544][ T6465] bridge_slave_1: left promiscuous mode [ 79.512043][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.625574][ T6465] bridge_slave_0: left allmulticast mode [ 79.628394][ T6465] bridge_slave_0: left promiscuous mode [ 79.630457][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.751580][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 79.754228][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.80'. [ 79.760154][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 79.776465][ T6475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.778922][ T6475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.781375][ T6475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.783865][ T6475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.791262][ T6475] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.793870][ T6475] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.796446][ T6475] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.798905][ T6475] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.973049][ T6473] tipc: Started in network mode [ 79.974471][ T6473] tipc: Node identity 4, cluster identity 4711 [ 79.976952][ T6473] tipc: Node number set to 4 [ 80.316559][ T6485] dvmrp0: entered allmulticast mode [ 80.339832][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.83'. [ 80.365216][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880685c2800: rx timeout, send abort [ 80.639884][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 80.865282][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880685c1000: rx timeout, send abort [ 80.867631][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880685c2800: abort rx timeout. Force session deactivation [ 81.007696][ T34] cfg80211: failed to load regulatory.db [ 81.080625][ T6493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.367622][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880685c1000: abort rx timeout. Force session deactivation [ 81.370583][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880685c1400: rx timeout, send abort [ 81.373038][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880685c1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.311871][ T6514] openvswitch: netlink: Message has 744 unknown bytes. [ 82.606943][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 82.609940][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'. [ 82.682943][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 82.683483][ T5317] Bluetooth: hci4: command 0x1003 tx timeout [ 82.892788][ T65] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.043633][ T65] usb 8-1: Using ep0 maxpacket: 8 [ 83.047596][ T65] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.051431][ T65] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.055269][ T65] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.059072][ T65] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.064579][ T65] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.068049][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.502756][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 83.505249][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 84.421351][ T6538] __nla_validate_parse: 1 callbacks suppressed [ 84.421391][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 84.425764][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 84.431056][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 85.245455][ T6544] tipc: Started in network mode [ 85.246868][ T6544] tipc: Node identity 4, cluster identity 4711 [ 85.248535][ T6544] tipc: Node number set to 4 [ 85.415278][ T6546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.99'. [ 85.650200][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 85.653182][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 85.659880][ T65] usb 8-1: usb_control_msg returned -71 [ 85.661853][ T65] usbtmc 8-1:16.0: can't read capabilities [ 85.669253][ T65] usb 8-1: USB disconnect, device number 3 [ 86.270778][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.274476][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 86.284408][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 87.049208][ T5996] kernel read not supported for file /dsp (pid: 5996 comm: kworker/1:3) [ 87.095505][ T6575] netlink: 48 bytes leftover after parsing attributes in process `syz.4.108'. [ 87.372734][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 87.532686][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 87.536457][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.539203][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.541958][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.544889][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.548653][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.551160][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.963707][ T5317] Bluetooth: hci4: command 0x1003 tx timeout [ 87.963733][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.514031][ T6601] __nla_validate_parse: 5 callbacks suppressed [ 89.514084][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 89.519738][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.114'. [ 89.526301][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 89.541225][ T6601] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.543711][ T6601] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.545996][ T6601] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.548389][ T6601] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.553909][ T6601] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.556352][ T6601] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.558706][ T6601] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.561145][ T6601] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.198979][ T34] usb 9-1: usb_control_msg returned -71 [ 90.200681][ T34] usbtmc 9-1:16.0: can't read capabilities [ 90.204995][ T34] usb 9-1: USB disconnect, device number 3 [ 90.424145][ T34] kernel read not supported for file /dsp (pid: 34 comm: kworker/3:0) [ 90.701370][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 90.704411][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 90.709401][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.123'. [ 90.747086][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 90.749493][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 91.348476][ T6633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.124'. [ 91.388849][ T6637] overlay: Unknown parameter 'appraise_type' [ 91.682725][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 91.832697][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 91.835685][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.838763][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.841554][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.844831][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.848448][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.850976][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.682830][ T5317] Bluetooth: hci4: command 0x1003 tx timeout [ 92.684677][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.993155][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 94.497000][ T29] usb 8-1: usb_control_msg returned -71 [ 94.499344][ T29] usbtmc 8-1:16.0: can't read capabilities [ 94.511110][ T29] usb 8-1: USB disconnect, device number 4 [ 94.621296][ T6670] dvmrp0: entered allmulticast mode [ 94.643226][ T6670] __nla_validate_parse: 4 callbacks suppressed [ 94.643242][ T6670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.136'. [ 94.680920][ T6673] overlay: Unknown parameter 'appraise_type' [ 95.036705][ T5998] kernel read not supported for file /dsp (pid: 5998 comm: kworker/2:3) [ 95.379267][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 95.382250][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.141'. [ 95.500049][ T5317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.504258][ T5317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.508544][ T5317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.511530][ T5317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.514444][ T5317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.572811][ T63] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 95.632779][ T6688] chnl_net:caif_netlink_parms(): no params data found [ 95.726211][ T63] usb 9-1: Using ep0 maxpacket: 8 [ 95.729564][ T63] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.730241][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.732749][ T63] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.732769][ T63] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.732786][ T63] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.732817][ T63] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.732834][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.749052][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.751321][ T6688] bridge_slave_0: entered allmulticast mode [ 95.754464][ T6688] bridge_slave_0: entered promiscuous mode [ 95.757737][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.760527][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.762752][ T6688] bridge_slave_1: entered allmulticast mode [ 95.765871][ T6688] bridge_slave_1: entered promiscuous mode [ 95.806242][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.810670][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.857761][ T6688] team0: Port device team_slave_0 added [ 95.863897][ T6688] team0: Port device team_slave_1 added [ 95.906498][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.908384][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.915123][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.918858][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.920844][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.927853][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 95.928736][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.931083][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.144'. [ 95.944176][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 95.992444][ T6688] hsr_slave_0: entered promiscuous mode [ 95.994844][ T6688] hsr_slave_1: entered promiscuous mode [ 95.996710][ T6688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.999327][ T6688] Cannot create hsr debugfs directory [ 96.181233][ T6688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.214144][ T6688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.218160][ T6688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.221990][ T6688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.240932][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.244389][ T6688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.247344][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.250088][ T6688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.275865][ T6702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.145'. [ 96.305255][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.320957][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.322319][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.332414][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.345961][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.346039][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.355124][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.355215][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.459668][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.599315][ T6688] veth0_vlan: entered promiscuous mode [ 96.604869][ T6688] veth1_vlan: entered promiscuous mode [ 96.627036][ T6688] veth0_macvtap: entered promiscuous mode [ 96.632441][ T6688] veth1_macvtap: entered promiscuous mode [ 96.641547][ T6730] overlay: Unknown parameter 'appraise_type' [ 96.642450][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.647281][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.650196][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.654324][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.658170][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.661841][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.665363][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.668745][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.673687][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.680969][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.684245][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.686829][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.689658][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.692295][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.695074][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.697650][ T6688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.700442][ T6688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.704153][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.708662][ T6688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.710989][ T6688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.713406][ T6688] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.715742][ T6688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.749643][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.751762][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.767058][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.769437][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.002116][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.004848][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.055811][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 97.058256][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.152'. [ 97.562861][ T5317] Bluetooth: hci4: command tx timeout [ 97.672170][ T6744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.153'. [ 98.383828][ T63] usb 9-1: usb_control_msg returned -71 [ 98.385331][ T63] usbtmc 9-1:16.0: can't read capabilities [ 98.392839][ T63] usb 9-1: USB disconnect, device number 4 [ 98.694096][ C0] Unknown status report in ack skb [ 98.778371][ T6778] overlay: Unknown parameter 'appraise_type' [ 98.781200][ T5317] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 99.002827][ T5317] Bluetooth: hci5: command 0x1003 tx timeout [ 99.002891][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.375120][ T6787] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 99.415786][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.438165][ T6787] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.642798][ T5317] Bluetooth: hci4: command tx timeout [ 100.228759][ T6804] __nla_validate_parse: 9 callbacks suppressed [ 100.228793][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 100.233503][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 100.238597][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'. [ 100.242992][ T5998] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 100.320755][ T6812] overlay: Unknown parameter 'appraise_type' [ 100.402729][ T5998] usb 8-1: Using ep0 maxpacket: 8 [ 100.405840][ T5998] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.408377][ T5998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.410942][ T5998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.413857][ T5998] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.417271][ T5998] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.419708][ T5998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.230896][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 101.233487][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 101.236661][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 101.518522][ T1137] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.612029][ T6837] tipc: Enabled bearer , priority 10 [ 101.722806][ T5955] Bluetooth: hci4: command tx timeout [ 102.028873][ T6120] kernel read not supported for file /dsp (pid: 6120 comm: kworker/3:4) [ 102.140943][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 102.143617][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 102.148112][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.185'. [ 102.812780][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 102.842547][ T6848] dns_resolver: Unsupported server list version (0) [ 102.962689][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 102.965358][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.968836][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.971482][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.976179][ T10] usb 9-1: config 0 descriptor?? [ 103.010875][ T5998] usb 8-1: usb_control_msg returned -71 [ 103.013019][ T5998] usbtmc 8-1:16.0: can't read capabilities [ 103.020273][ T5998] usb 8-1: USB disconnect, device number 5 [ 103.082831][ T6120] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 103.184606][ T10] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.234286][ T6120] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.237519][ T6120] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 103.242518][ T6120] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.245952][ T6120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.248270][ T6120] usb 7-1: Product: syz [ 103.249438][ T6120] usb 7-1: Manufacturer: syz [ 103.250734][ T6120] usb 7-1: SerialNumber: syz [ 103.392103][ T5996] usb 9-1: USB disconnect, device number 5 [ 103.460512][ T6848] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 103.562775][ T5317] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.562926][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 103.667612][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 103.806765][ T5317] Bluetooth: hci4: command tx timeout [ 104.019430][ T6869] tipc: Enabling of bearer rejected, already enabled [ 104.069410][ T6848] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 104.275886][ T6120] cdc_mbim 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 104.278370][ T6120] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 104.281124][ T6120] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 104.476733][ T6120] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 104.480157][ T6120] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 104.484244][ T6120] wwan wwan0: port wwan0mbim0 attached [ 104.490946][ T6120] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 104.540846][ T57] kernel read not supported for file /dsp (pid: 57 comm: kworker/1:1) [ 104.672129][ T5666] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 104.683978][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.686417][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.688751][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.690844][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.692905][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.694705][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.696600][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.698469][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.700419][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.702870][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.708738][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.710678][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.713194][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.715028][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.717028][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.719013][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.721208][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.723309][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.725270][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 104.727058][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 104.748526][ T6120] usb 7-1: USB disconnect, device number 4 [ 104.750923][ T6120] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 104.887606][ T6120] wwan wwan0: port wwan0mbim0 disconnected [ 105.202996][ T6016] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 105.368809][ T6016] usb 10-1: Using ep0 maxpacket: 8 [ 105.375546][ T6016] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.379223][ T6016] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.386731][ T6016] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.390761][ T6016] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.395582][ T6016] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.399037][ T6016] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.757684][ T40] kauditd_printk_skb: 5281 callbacks suppressed [ 106.757701][ T40] audit: type=1400 audit(1744395332.933:5294): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6921 comm="syz.4.205" [ 106.787324][ T6926] __nla_validate_parse: 5 callbacks suppressed [ 106.787340][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 106.803180][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 106.811079][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 107.488918][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 107.492202][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 107.499336][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 107.882718][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 107.882913][ T5317] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.012945][ T6016] usb 10-1: usb_control_msg returned -71 [ 108.014818][ T6016] usbtmc 10-1:16.0: can't read capabilities [ 108.022258][ T6016] usb 10-1: USB disconnect, device number 2 [ 108.089932][ T6936] bridge1: entered promiscuous mode [ 108.109375][ T6936] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.212330][ T6936] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.309394][ T6936] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.390256][ T6936] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.472889][ T6936] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.480539][ T6936] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.495266][ T6936] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.508122][ T6936] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.614113][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 108.621589][ T6951] lo: entered promiscuous mode [ 108.625449][ T6951] lo: entered allmulticast mode [ 108.627792][ T6951] lo: left allmulticast mode [ 108.629805][ T6951] lo: left promiscuous mode [ 108.801102][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.214'. [ 108.804008][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.5.214'. [ 108.808162][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.214'. [ 108.952815][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.102796][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 109.108197][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.112143][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.116399][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.120318][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.125558][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.129210][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.635944][ T6964] tipc: Started in network mode [ 109.637339][ T6964] tipc: Node identity 4, cluster identity 4711 [ 109.639042][ T6964] tipc: Node number set to 4 [ 110.439628][ T1141] Bluetooth: hci5: Frame reassembly failed (-84) [ 111.722270][ T34] usb 7-1: usb_control_msg returned -71 [ 111.724287][ T34] usbtmc 7-1:16.0: can't read capabilities [ 111.730732][ T34] usb 7-1: USB disconnect, device number 5 [ 111.835367][ T6988] __nla_validate_parse: 6 callbacks suppressed [ 111.835377][ T6988] netlink: 116 bytes leftover after parsing attributes in process `syz.5.229'. [ 111.900391][ T6989] tipc: Enabled bearer , priority 10 [ 112.188908][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 112.192215][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.230'. [ 112.200107][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.230'. [ 112.309235][ T34] kernel read not supported for file /dsp (pid: 34 comm: kworker/3:0) [ 112.442799][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 112.442819][ T5317] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.851525][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 112.942341][ T5317] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 113.192852][ T5998] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 113.342833][ T5998] usb 10-1: Using ep0 maxpacket: 8 [ 113.346062][ T5998] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.349034][ T5998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.352776][ T5998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.356212][ T5998] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.359715][ T5998] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.362129][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.698343][ T6490] ================================================================== [ 113.701189][ T6490] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x381/0x420 [ 113.704136][ T6490] Read of size 8 at addr ffff888068af3058 by task syz.0.91/6490 [ 113.708690][ T6490] [ 113.709555][ T6490] CPU: 2 UID: 0 PID: 6490 Comm: syz.0.91 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 113.709576][ T6490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.709586][ T6490] Call Trace: [ 113.709593][ T6490] [ 113.709600][ T6490] dump_stack_lvl+0x116/0x1f0 [ 113.709626][ T6490] print_report+0xc3/0x670 [ 113.709650][ T6490] ? __virt_addr_valid+0x5e/0x590 [ 113.709669][ T6490] ? __phys_addr+0xc6/0x150 [ 113.709691][ T6490] ? skb_queue_purge_reason+0x381/0x420 [ 113.709714][ T6490] kasan_report+0xe0/0x110 [ 113.709727][ T6490] ? skb_queue_purge_reason+0x381/0x420 [ 113.709750][ T6490] skb_queue_purge_reason+0x381/0x420 [ 113.709770][ T6490] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 113.709794][ T6490] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.709816][ T6490] ? drain_workqueue+0x313/0x3d0 [ 113.709834][ T6490] ? __pfx_vhci_flush+0x10/0x10 [ 113.709847][ T6490] vhci_flush+0x40/0x50 [ 113.709856][ T6490] hci_dev_reset+0x22e/0x530 [ 113.709876][ T6490] hci_sock_ioctl+0x493/0x7d0 [ 113.709893][ T6490] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 113.709913][ T6490] hci_sock_compat_ioctl+0x43/0x80 [ 113.709930][ T6490] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 113.709947][ T6490] compat_sock_ioctl+0x173/0x7c0 [ 113.709958][ T6490] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 113.709973][ T6490] ? hook_file_ioctl_common+0x145/0x410 [ 113.710003][ T6490] ? __fget_files+0x20e/0x3c0 [ 113.710027][ T6490] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 113.710044][ T6490] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 113.710060][ T6490] __do_fast_syscall_32+0x73/0x120 [ 113.710085][ T6490] do_fast_syscall_32+0x32/0x80 [ 113.710107][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.710133][ T6490] RIP: 0023:0xf73ae579 [ 113.710145][ T6490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.710158][ T6490] RSP: 002b:00000000f4ffc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 113.710174][ T6490] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000400448cb [ 113.710185][ T6490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.710194][ T6490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.710203][ T6490] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 113.710212][ T6490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.710228][ T6490] [ 113.710233][ T6490] [ 113.782705][ T6490] Allocated by task 6106: [ 113.783904][ T6490] kasan_save_stack+0x33/0x60 [ 113.785210][ T6490] kasan_save_track+0x14/0x30 [ 113.786517][ T6490] __kasan_kmalloc+0xaa/0xb0 [ 113.787810][ T6490] vhci_open+0x4c/0x430 [ 113.788965][ T6490] misc_open+0x35a/0x420 [ 113.790157][ T6490] chrdev_open+0x231/0x6a0 [ 113.791420][ T6490] do_dentry_open+0x741/0x1c10 [ 113.792813][ T6490] vfs_open+0x82/0x3f0 [ 113.794049][ T6490] path_openat+0x1e5e/0x2d40 [ 113.795350][ T6490] do_filp_open+0x20b/0x470 [ 113.796632][ T6490] do_sys_openat2+0x11b/0x1d0 [ 113.797940][ T6490] __ia32_compat_sys_openat+0x16d/0x210 [ 113.799497][ T6490] __do_fast_syscall_32+0x73/0x120 [ 113.800946][ T6490] do_fast_syscall_32+0x32/0x80 [ 113.802310][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.804065][ T6490] [ 113.804748][ T6490] Freed by task 6106: [ 113.805866][ T6490] kasan_save_stack+0x33/0x60 [ 113.807193][ T6490] kasan_save_track+0x14/0x30 [ 113.808515][ T6490] kasan_save_free_info+0x3b/0x60 [ 113.809922][ T6490] __kasan_slab_free+0x51/0x70 [ 113.811279][ T6490] kfree+0x2b6/0x4d0 [ 113.812384][ T6490] vhci_release+0xbb/0xf0 [ 113.813594][ T6490] __fput+0x3ff/0xb70 [ 113.814709][ T6490] task_work_run+0x14d/0x240 [ 113.816000][ T6490] do_exit+0xafb/0x2c30 [ 113.817173][ T6490] do_group_exit+0xd3/0x2a0 [ 113.818445][ T6490] __ia32_sys_exit_group+0x3e/0x50 [ 113.819875][ T6490] ia32_sys_call+0xd56/0x1c40 [ 113.821212][ T6490] __do_fast_syscall_32+0x73/0x120 [ 113.822652][ T6490] do_fast_syscall_32+0x32/0x80 [ 113.824021][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.825769][ T6490] [ 113.826450][ T6490] The buggy address belongs to the object at ffff888068af3000 [ 113.826450][ T6490] which belongs to the cache kmalloc-1k of size 1024 [ 113.829183][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 113.830249][ T6490] The buggy address is located 88 bytes inside of [ 113.830249][ T6490] freed 1024-byte region [ffff888068af3000, ffff888068af3400) [ 113.837510][ T6490] [ 113.838215][ T6490] The buggy address belongs to the physical page: [ 113.840007][ T6490] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888068af0000 pfn:0x68af0 [ 113.842770][ T6490] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.845097][ T6490] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 113.847471][ T6490] page_type: f5(slab) [ 113.848599][ T6490] raw: 04fff00000000240 ffff88801b442dc0 ffffea00019f0c10 ffffea0001441e10 [ 113.850990][ T6490] raw: ffff888068af0000 000000000010000d 00000000f5000000 0000000000000000 [ 113.853348][ T6490] head: 04fff00000000240 ffff88801b442dc0 ffffea00019f0c10 ffffea0001441e10 [ 113.855731][ T6490] head: ffff888068af0000 000000000010000d 00000000f5000000 0000000000000000 [ 113.858122][ T6490] head: 04fff00000000003 ffffea0001a2bc01 00000000ffffffff 00000000ffffffff [ 113.860522][ T6490] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 113.862905][ T6490] page dumped because: kasan: bad access detected [ 113.864677][ T6490] page_owner tracks the page as allocated [ 113.866249][ T6490] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 23, tgid 23 (ksoftirqd/2), ts 58588130242, free_ts 58436723766 [ 113.871364][ T6490] post_alloc_hook+0x181/0x1b0 [ 113.872646][ T6490] get_page_from_freelist+0x1193/0x39b0 [ 113.874116][ T6490] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 113.875703][ T6490] alloc_pages_mpol+0x1fb/0x550 [ 113.877020][ T6490] new_slab+0x23c/0x330 [ 113.878161][ T6490] ___slab_alloc+0xd9c/0x1940 [ 113.879417][ T6490] __slab_alloc.constprop.0+0x56/0xb0 [ 113.880888][ T6490] __kmalloc_noprof+0x2f2/0x510 [ 113.882214][ T6490] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 113.883800][ T6490] ieee80211_inform_bss+0x10b/0x1140 [ 113.885220][ T6490] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 113.886877][ T6490] cfg80211_inform_bss_data+0x224/0x3bd0 [ 113.888403][ T6490] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 113.890039][ T6490] ieee80211_bss_info_update+0x310/0xab0 [ 113.891537][ T6490] ieee80211_scan_rx+0x475/0xae0 [ 113.892880][ T6490] ieee80211_rx_list+0x1bdb/0x2980 [ 113.894278][ T6490] page last free pid 6039 tgid 6022 stack trace: [ 113.896023][ T6490] __free_frozen_pages+0x69d/0xff0 [ 113.897415][ T6490] __put_partials+0x16d/0x1c0 [ 113.898693][ T6490] qlist_free_all+0x4e/0x120 [ 113.899987][ T6490] kasan_quarantine_reduce+0x195/0x1e0 [ 113.901458][ T6490] __kasan_slab_alloc+0x69/0x90 [ 113.902792][ T6490] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 113.904244][ T6490] netdevice_event+0x365/0x9d0 [ 113.905557][ T6490] notifier_call_chain+0xb9/0x410 [ 113.906907][ T6490] call_netdevice_notifiers_info+0xbe/0x140 [ 113.908526][ T6490] unregister_netdevice_many_notify+0xe84/0x25a0 [ 113.910256][ T6490] rtnl_newlink+0x171e/0x2000 [ 113.911558][ T6490] rtnetlink_rcv_msg+0x95b/0xe90 [ 113.912962][ T6490] netlink_rcv_skb+0x16a/0x440 [ 113.914249][ T6490] netlink_unicast+0x53a/0x7f0 [ 113.915568][ T6490] netlink_sendmsg+0x8d1/0xdd0 [ 113.916882][ T6490] ____sys_sendmsg+0xa95/0xc70 [ 113.918187][ T6490] [ 113.918856][ T6490] Memory state around the buggy address: [ 113.920398][ T6490] ffff888068af2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.922532][ T6490] ffff888068af2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.924662][ T6490] >ffff888068af3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.926862][ T6490] ^ [ 113.928746][ T6490] ffff888068af3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.930885][ T6490] ffff888068af3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.933015][ T6490] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.061484][ T6490] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.063799][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.0.91 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 114.067285][ T6490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.070960][ T6490] Call Trace: [ 114.071868][ T6490] [ 114.072720][ T6490] dump_stack_lvl+0x3d/0x1f0 [ 114.074028][ T6490] panic+0x71c/0x800 [ 114.075162][ T6490] ? __pfx_panic+0x10/0x10 [ 114.076455][ T6490] ? mark_held_locks+0x49/0x80 [ 114.077880][ T6490] ? preempt_schedule_thunk+0x16/0x30 [ 114.079876][ T6490] ? skb_queue_purge_reason+0x381/0x420 [ 114.081893][ T6490] ? preempt_schedule_common+0x44/0xc0 [ 114.083721][ T6490] ? skb_queue_purge_reason+0x381/0x420 [ 114.085218][ T6490] check_panic_on_warn+0xab/0xb0 [ 114.086884][ T6490] end_report+0x107/0x170 [ 114.088349][ T6490] kasan_report+0xee/0x110 [ 114.090059][ T6490] ? skb_queue_purge_reason+0x381/0x420 [ 114.092116][ T6490] skb_queue_purge_reason+0x381/0x420 [ 114.094128][ T6490] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 114.096362][ T6490] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.098484][ T6490] ? drain_workqueue+0x313/0x3d0 [ 114.100378][ T6490] ? __pfx_vhci_flush+0x10/0x10 [ 114.102186][ T6490] vhci_flush+0x40/0x50 [ 114.103772][ T6490] hci_dev_reset+0x22e/0x530 [ 114.105497][ T6490] hci_sock_ioctl+0x493/0x7d0 [ 114.106943][ T6490] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 114.108699][ T6490] hci_sock_compat_ioctl+0x43/0x80 [ 114.110451][ T6490] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 114.112078][ T6490] compat_sock_ioctl+0x173/0x7c0 [ 114.113459][ T6490] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 114.114938][ T6490] ? hook_file_ioctl_common+0x145/0x410 [ 114.116518][ T6490] ? __fget_files+0x20e/0x3c0 [ 114.117945][ T6490] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 114.119596][ T6490] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 114.121091][ T6490] __do_fast_syscall_32+0x73/0x120 [ 114.122523][ T6490] do_fast_syscall_32+0x32/0x80 [ 114.123898][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.125588][ T6490] RIP: 0023:0xf73ae579 [ 114.126750][ T6490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 114.133473][ T6490] RSP: 002b:00000000f4ffc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 114.135837][ T6490] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000400448cb [ 114.138152][ T6490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.141021][ T6490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.143905][ T6490] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 114.146948][ T6490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.150019][ T6490] [ 114.151578][ T6490] Kernel Offset: disabled [ 114.153023][ T6490] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:15:40 Registers: info registers vcpu 0 CPU#0 RAX=000000000020fddb RBX=0000000000000000 RCX=ffffffff8b701439 RDX=0000000000000000 RSI=ffffffff8dbeac26 RDI=ffffffff8bf44f40 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6ffccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800003c0 CR3=000000004acc4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000019000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000040e6c1 RBX=0000000000000001 RCX=ffffffff8b701439 RDX=0000000000000000 RSI=ffffffff8dbeac26 RDI=ffffffff8bf44f40 RBP=ffffed1003b57488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801daba440 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6ffccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2db872 CR3=0000000020130000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bc3c5 RDI=ffffffff9ae12bc0 RBP=ffffffff9ae12b80 RSP=ffffc9000484f600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ae12b80 R15=ffffffff854bc360 RIP=ffffffff854bc3ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000fffa5e80 CR3=00000000291b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000018da4f RBX=0000000000000003 RCX=ffffffff8b701439 RDX=0000000000000000 RSI=ffffffff8dbeac26 RDI=ffffffff8bf44f40 RBP=ffffed1003b5a000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dad0000 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6ffccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f50c5da4 CR3=00000000291b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000