last executing test programs: 15.027122243s ago: executing program 0 (id=84): openat$dir(0xffffff9c, &(0x7f0000000080)='./file1\x00', 0x284000, 0x148) openat2$dir(0xffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x250080, 0x4, 0x4}, 0x18) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000001000000010000007dfd3dc4d1b602260b37b9f70717b488439e209d088aa2c51647139ded3af468765f3c49bbe6536f164532f9eb050cc12a7da5ad720172e695544ec20bb613afe0412dd8d7304b17db05af5bf1a44bcbbe8529606a16dab8de31d9faa95fa1343e98cdfc4b", @ANYRES32=r0], 0x10}}], 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x65c, 0x4204, 0x3, 0x6, 0x0, 0x9}}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x3}]}}}}}) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 15.026595738s ago: executing program 0 (id=85): epoll_create1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000f4a53716b045d3ed3ce59e5a7542d23904000000000000000000000000ef7ebe456f39f3bd2b71327e1ece7a18c1a463a64d5db294a19cc724fb9f61960bc4ff8fa2b231300006d665ce472058ac00972fb16edaf4139ac1a65d5a963996e63da6a68e74d6a3b3aa78b29427907eadbdc468c1452118ee102e910a7d802564e1011842c82fd79a5784987a912d0da50624b2068b64974bb3f11ea24fb8bfeea02611", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800800050003000000140035006d616373656330000000000000000000"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$hidraw(r2, &(0x7f0000001300)=""/153, 0x99) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)='\"', 0x1}], 0x1) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000040)={0x4, 0x2000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20, 0x6f2}, 0x10, 0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x0, 0x10, 0x2000}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400040082c104003e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 14.846634199s ago: executing program 2 (id=86): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000800) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r4, &(0x7f00000000c0)=""/29, 0x1d) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c53119"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2271, &(0x7f0000000140)) 14.717032045s ago: executing program 0 (id=87): r0 = socket$inet6(0xa, 0x0, 0x87) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000000000001900000008000000e3", @ANYBLOB], 0x24}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1b) socket$inet(0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b24e90000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25030000001400028006000b0002000000060002004e210000240002800800060002000000080003000300000008000300040000000800040030080000040002800c00038006000400d802000008000500050000000800050000ffffff1c00018008000b0073697000080008000800000008000500000000000800060007000000"], 0x90}, 0x1, 0x0, 0x0, 0x20040044}, 0x20008000) 13.846678038s ago: executing program 0 (id=88): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c3", @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r2 = socket$inet6(0xa, 0xa, 0x7d7) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001d00)={0xffffffbd, {{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x104) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000180)={0x2, 0x9, 0x1}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) r4 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_emit_vhci(&(0x7f0000005e00)=ANY=[@ANYBLOB="040e9c6e230c"], 0xa) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "976608795686eada", "1908d15aefa793557952d21b1ffe1d6a", "1de7e306", "72e1545fb3a88868"}, 0x28) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0x3, 0x3, 0x1000, 0xe4, 0x14, "4e795465432671c6"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000280)={0x0, 0x1ff, 0x4efa}) 13.766438514s ago: executing program 0 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="303304f9543a078663d1af57405d4559f746b6f36b09fe488a558fb221aebc88c70c26a970ca732fc1fc208bba9676cfeda3bd0f570da69606c9f84b3a12f3df7993f60ef6e22c3f112449243e194b2293b26a628c1db8c945a72ca0136987561f055def1c6f4278d59ccd9040c0c241af9f0e76066c1813a49ce1b851621691133a4e5dad56dfac158b8a8191acb503988f269296b3103b8cf330fb4a6333c17977768e867a47d2de0a8d33cfaff79b129fd65aef80892cb5fe7b0e46a94658e7c34eb2915fdf89ff88607fbd690163"], 0x1c}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') unlink(&(0x7f0000000100)='./file0/file0\x00') openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$CAPI_GET_PROFILE(r6, 0xc0404309, &(0x7f00000002c0)=0x80000000) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0xc000000) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r8) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 13.716523386s ago: executing program 0 (id=90): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x24000800) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r4, &(0x7f00000000c0)=""/29, 0x1d) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c53119"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2271, &(0x7f0000000140)) 2.456647605s ago: executing program 3 (id=99): openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100), 0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x9) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x3, 0x4000}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x419}}}, 0x7) 2.236606205s ago: executing program 3 (id=100): syz_emit_ethernet(0xd6, &(0x7f0000000280)={@local, @random="f3c967b593cf", @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "b6c856", 0xa0, 0x2f, 0xff, @remote, @empty, {[@dstopts], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x52, 0x2, [0x0], "9321563ee3df68fb43e6e507593a83c09c3faaee10664dedbcd6cddd1bd43399c0ea3af7a659f2abaee1708cadf49b7bf062cac4fc0ff4c8177a9166d8c35e9d7329795ac340ef12d692750b4db95b0a30ad"}, {}, {0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x8}, 0x1, {0xfffffffb}}}, {0x8, 0x22eb, 0x3, {{0xd, 0x2, 0xef, 0x0, 0x0, 0x3, 0x5, 0x5}, 0x2, {0x5, 0xfd93, 0x0, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) socket$inet(0x2, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180400000000000000000000004000008500000008", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000008500000005"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095", @ANYBLOB="180100f520ed41cd00000000000000000000000085", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x2, 0xfffffffffffffde9, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000002100000225bd7000fddbdf250a002004400000030400000014000100ff020000000000000000000000000000000000000000011e00060008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48d4}, 0x20000041) syz_80211_inject_frame(0x0, 0x0, 0x47) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000480)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x0) 2.02583286s ago: executing program 1 (id=101): openat$dir(0xffffff9c, &(0x7f0000000080)='./file1\x00', 0x284000, 0x148) openat2$dir(0xffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x250080, 0x4, 0x4}, 0x18) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r1, {0x7, 0x28, 0x65c, 0x4204, 0x3, 0x6, 0x0, 0x9}}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x3}]}}}}}) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 1.946729462s ago: executing program 1 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0xe4, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) 1.846506924s ago: executing program 1 (id=103): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x8, 0x0, 0xba}, 0xffffffffffffffee) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xd1, 0xc7, &(0x7f0000000000)="2e2232e34dc3a1e02a1f3049d9b5db64b5781899629597be519570e8065fe2113f4a06a22af301284423889a1a78bc09bc5d156804100f08023e45c026105fbcb0e702b06c78a5a18697e52ff267a5ca5f74b95b3bce746cdd80baedfab7ecdbde8b8cd13933cc33fa84ab952ba13072f03e28a8b0511af3d5c48de4380ef51d782c2db84bf4d37c2e71d65446fea7a6f0d9d19cb7b9884a9d901d8e3c698e431b7e5c29ac9944c049329096dac77895e68505d2ee150a1761fab1e736d99713b430875cabcf598caf840485c3138625af", &(0x7f00000002c0)=""/199, 0x6, 0x0, 0x79, 0xf80, &(0x7f00000003c0)="889183496cd917f490e0a5284395f8256e3cd14308f9b1ccc4583bcf62ac35031d212c1a15b88eb726600f783b06557aa2a783cdcec2b8073c760b120026556a45d6172d01db3b6fec0bf2ef2bde90c6c2fbec954e1702e9a66725f52b9bd2d107b10b08ab585a4be7c600fcf54976d64b2c0bf057413869a8", &(0x7f00000007c0)="e2c55a6ec13876ab92caa3d2e6d0116804798ffd47dca84388be2f66a95ce9750324c886412332fdd0d2a436892955612bfb5e8c01e6221c785ac95aee8663fa3b7f9f27096cee53a0d753305dca8daa55c0889003b355fd9fdf3e74b290f85e703f93f8f7d8a8ffd3b40d270edf93625cf803a70a45c8a77ae06476f6dbb1e05196f6aa1bfbe09a71c74f5be8893a5d0d3505cce6f47847bc6dcaa2202fb7d7c129aeb495ea0dcef52af0ea3350d2f82d3312449c7737a8aeccdf44b3d086a0cb817f89a8aff93a692025487acf3545b6e5c2b67cf53dc0233d6066457efa30d67ae8345f80510fb718b43823710929de6b7e8fe60003df13c1da0ccb542fb26ad853f1e31d5b2e223b8ffb0a8914a6382c9f104a26edeec42c2d386aa421a7d9ec80eee0581cf24a2ae92267d2a00dfd9e3e40434be08f1239d6b546922b93a6eb216fecbd960a1f29c642ff8f0dfbdf6b7107cdd3cc620dfb1321a4caa80e6543bb3f7cde91e08a71187241e58a7c09056a35296ac8e6287c645e4201b457ef4030129d28bef4d5332b5849720922b7a5dcf551c2ecb96c0e7f08e33227ca7b9b716f5a2a0ff6a3e51a64e6e178e9685804762d2ad193d4c81905f54ab2cda9156aebdcb02c68300b77af9d407f0ba55045920fce5e3c4030c4f10004f6b0d7895e4a47ff3eaa9a3a31f147eba73ec6cf9f577131c35a0968e579915e416bd5146f9cb0131b1997a278016ddbcc6bb9c053f69967ea2af1da42cb72169c15cc8d96e5e76253eeca009c1a445d944d856ab342eacdee6b0a4d138f898dc8cca8d06f46f14e538ce86d85be7b468e21dc1dc26d9cf8aded4c57926f2d8698f0c03ada333f437f5f2db0cef9f2b632ac88f440031b2522199fb9d7c2ce2b5b8ea1d18cac595b6799b9ccb2ee889762e0524ecd31f8bf45374e9f8d1adfad6c45a156cde56240158c91bf3edcd371dd7c8b032b7422af27afd5e25acdf4df3fe828fc50fc4fd52aa447e1f027e488ad0ec5acbc7431a457a74894816e8a4f20d0a29cfb608ef068d0048f8cad7b3b6103e6dc56453ebf46fa1864dd5220fec36967748435427e00b985fa5318ca63566e9fe8580c14e8bcc9e677e62bd1f47c97ed3949fca592a2544a1723bd9aa75c52fa8e4412da2423772b2b66e1983e8d6ac76e9e13c23cdda683be85370193b6a637275f5647f52e674dc37a5112abf8f9fa2f0fa68af727d029db539df8412cd01d604a255a2c32438b5ae9399e135d0b9808e3215c38176c4488dc3f946f38592cdf12d0f739ea7ad38f81f880b42a09cb74beb9ef8fc9646015e18da9eda84cb0135d9ab92ea32288a4e1e3a77b8042bf4742a853b490b220ee549cb37e5c49ee9331796617bc5221ab40322999df9c4ff6bf5a9df0982dda74edcbe19471d7767f924c237aaad5de849870e0a205dc9f574cb0704eb6eae033c9c33498e72bc16beab15f1311d4819eff48637c31ff8309d435bc4050ecd55e27846c50ff21e832cc59ca03cfe2850f0824c1905833dc58d98b1118cfbdb25d1caecd407d543a67c50f448596e70e6837169642ff8cbaa7c40f6a620fc509c5c4e72ddf16b2b94d26a80d752218aa6ba6c5b39456f95eb3453187ad1bfd4327752e963360e3754c4bcdef4aa321ba581865cc5c3be1299c26041e4bc5d3e7594efd3f0fd607268ee25ab19d7d15bcf3840f1342dd69868a479dde388dd0d3569ed399d9270836004a5ecd76ce2f6bf7b023c70e0dfd1b7b408bd4ceb1751ed399c8c98b7932eb1c28b71ae227e7cc688ecc794ed9132d4365f48d38073b941d606ce1be1f91dfcacc6f6098fd8bcc3a01bda3748110271268398789b858b671c6e4d0108bf7ac407e05d913e7988156ccb2d38c21a2bee4935a4a33d4d47211bd835f22943e10329e184a5813e8228faf3dac91a9e5c9be9c078d453e1be16281017aedb19e7413b3d8f8262cf53deff195dba97704eb034acb3ab0ca6c2fce28416d0fe65088a2c61f56aa254728aa090d6d249e2851145f0d0accf027e03f8f1af98203730988f26ef94db2139661ab61a83808d03735346d52d86da6f110907d504012fac9d0b0a1c9107c192bbd8f3de6f6e5c0111922a696e5e312b84736449200673add2d4b37c5bf4985059fcc1a7df39445a7a9d61747e44787fcaef538ba219a89278bdd1e23305b8fe0760007e76200ded822732023f04a1e7a21d7b43cffbd6fa4598bcf5144dbd904f7a3f07eb0addaed6b9a1bf57241c20c6f22ae46456397215030b6d5f408b3580b819d2665fe33965ce20e660143f41ceb53e4d594bc6b50b470fc1a9f1ac0bae0aae47eabed34a748486f184813015364745de5dbcb6036b75d15cf0993507c38f2e9d2c642c2a9612dd7382668d7a44458d74eea78d88f1623a493a0b4ff901756265df80fbe1acd985cd00812bbd85b48d841bfeac21e5ddd42e274f1181197d64311a73970ae0e02374fe50dc040a0eb267147d95b0c5ce711f13a079d6ad1ad03a1cee191d603316a838a9330de549c0c2953fabbd3890488b4c4fa047b81bd097a978b21146e28bc57b1012fe67f4999e10f6a37df23804196f120b5162a459ec249fcd8eae4e5609e03b9faad9ec06c7bf8e398f71523b5fd1c590d2a9b3c9bfc1f5891db8645beeedc2f9dd0b878635c45f6defe63cc42a6648d0f2f1da9f65857a4e47db9eef886d2f7d03181c57af509a39975254e228300e19558201648e9077d8944c911a748a3dd06623abc520b660453f4477978304c0e8b6654820468f7cf42962c1eb1e9d2bc95611119d1130e9684d2cea69183fcfe50abcaf02481b8c3d5c6692818f2ade121e63ad84352f8f8c113742e58e2742c366a4aae584a0f702b6f6b69f1dee261e7ddfaeba786a541ea19c8712bb7359d299289b54544322432f008f65660226beb140bff0e4a8c9255f2c410f2ccd3ca2dec75bd308fc7cf7c5101ca17277903d9fd4d6fd79f2a83d906361caa20e789bf9a79b83d60103d8a41cd2d6a9945a456bc20d3f6bd97a87f1db9a569ee4a6b1014d0c05fc55c24cf007183ef32f082073106d1e5f615c6493e0888403c61acfcc7d471432ba2e491050f414494c4c2ee047ace5c8d4d9e9eda757fe79b51563611e4d8e2b70a9a9bb0d756e07973402b76ba385798246320f607283950039277760cf6987d00433ecd1b3ebeda97fd51b42027d6ff4c18fa8c247ef72186fd5e59d923aa0995bba223404c667e4b4bd07bc221fc43c3e70042930ffd9292e2f1ff3420489f95635cb8b2254234caf17685da62f6042ff4438fce4ad9cb523a7c82ea4e11b684fd4164f4fc5fd7da940bcdd89c2e786922dcd83813bb512e166eaaab5011a580bb5add38a09f35b31768133786e1915bcb11134555e22f93491fd879294d8e48b8bdee4575fd1af07a51905d69a26f309304f281b31ae053a6983176a5942ff2eeb12d23692643f55c599a8841ed3b0e3adba729c43f61eed2ec8a4116cb7be5df792520336ec4cbef27ef89473428aee998fe7c19fc4406836f4820b190af3d09e0d9e4ffae0c48d4c3f83b86eba22099b8641b3dc1bfbb2c5572cb6811de7cd65dc39ecbc79bff8c5f98152b2f100ee8b0ea9cb97db38dd6b224fdc789f412057e2c6044f9cf4e274403190533573619362a5e43a93f321a9d4076ffe3afc805bbacb7e63d86ac7321b75a2ea109ae4610b6924ddfd30410fe557c31e73de8949247422af19db216f4699552d6b6e76bd5234f6457d4d3ddaaf1c87ccb13b58dbc190a9cb6049a7e5e2bd78874da219daa82fe3842d1e51d67c74d8ef9693eace506bc98da93e42ca3e5a14e44beb3ccf5e749ce890dccb4f6d352c5a2fe79987ca8d4935e8405458e0d5d37d3622465fc33ca8922b92fdc03f7afe90d904d7eea0a826b4cecc70db5751a06a7a6768648e961243b10b8449c986a7fb18e86b19fc8a660d28682aa31d04028f65e7c1bb0d243866718f1359e4370f8e33aaba99887407d32f0f3b84d6d5d5560ae5832fc85549995fc61c59d50f9b282339a75e751681d1d403d84cfbd684cfe30c8c292df2aae08c3840accfbdb053836c550695102f9cc2a1fd58bc1777974ab25e8d725573fbc847fa416288adef16b1a43248849929822c649628453bf81fa08f91c8b64e367083f17004979e83ef8d762029f7e5d101c65f1eb3f647b06638b1a851e1978e909aa53d64e35b2f3c57a0ea92d88e9033d2534c72d593457fdca8aacc2fdb6c3f1ce251d0836abc51c1ae25341a8c7a41233816c616151583e2451716bbd9c4ca093603f2b1bae369a9427b46c528868316c12df24da58bbc0c86158c88de5c1c0596f3473e60ba4dc3df641d005b24a33081824288ba421922443a814a13cc2397463016d1eed049eb8380ce08503a5ded025bed9d7e554a3cd52d9038f2adcd96d92f69a26792a7b06258630abf149084fe4a3e2260a16471f753a060a7fac5901d2fa8888006e87b0a415376a500e0babc4a82f2dbd352885506e82cbf2d1cb3c648ad883376e4affc4a5d372a16a147c60ce5b781af2ec3ee81894ec5e31142d634768714bb9eff81e62c7480b169c1f9ebd6ca10c68db305031f991e0bed61acf2690aa24480d8b86a4b65eb4ba5d6f2c50f590aa85e6bac5645179ea988a309b49b9ef5bbb97eb09582e03983031cc3646e0795f6dea66890ffe3adc9535e663e532ea7c563558450a2d5ceb69c705e77c92aab96dc84139290b5a276c7a0f0c10d41199356e110e4d2a80ee29894729d91b73c6937a2400226e05c0135e236dbe28598973da546d1a7f6361b15f849f6337c21dd8a796b7f7cab7120a3b3eed2813da0a45c1f1b7fd7a833d709f124f3f57dee9aec6baad2a6ad1004d70d14914a1e1b0f1d09d6ca2d7a0e9330e500b22f2258267360c91a3cf827a64ef1f485ba960b051b73da73a1b8db98951e9b824bee1e5f6ded8cf43ba07058f964135c7474b9377821e54d87a8b2a0284207d547a4f2b1f5106a812089ac6bcf9757075caddcea35d49bc65e3af8a06fd7b1cdaad35f6be46b2702771a7eda1db85a3857c926d24e8f810b797e73e19bb6aae903f66417a20c0050708e31fdc37ed23efb23d70d688ab957bd2d3fe3aa0fb7c6d71266ad759c082790bc7cd8ebce98654f4caa96028a2d86d75f66df280700291988115493c3cad35a76525220aceb912494266f9159ed787fc7d014613546315b4b7fc9d690499cc9fb74576e40314bc5e44e28767fec68daf6d77de1e968f23eb873653bf22777032027dc3a0a146a6486b50fd6d5b93c24fc1cc83b4d3c22b82b476f8702d78ad449a3a138b23e441adbe506ca783ed07ae0a16103a5ae965f40481bbfdd38dd7a36c5cf63ee8aa55d8b2be751e15ab7c84aa05da385a43cbede5d0bbe14661505242e19e3461c2844cf9eee6b7641538707cbd89c17a42102688fb485538290a4977a514348a913e3a64af4e06a764bb65bc9e7d4c643e18805dc257904e0fe6f5bc6c896b3b45365dcde102c36318b17da4f8ff5af33067ce533794c7b2b1d6a7518ca2d8e355347b15d74aa18246da", 0x0, 0x0, 0x38000000}, 0x4c) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) vmsplice(r3, &(0x7f00000017c0), 0x0, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000240)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = open(0x0, 0x0, 0x0) ioctl$BLKROSET(r5, 0x125d, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000002c0)='contention_end\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=')') ioperm(0x0, 0x3, 0x495) sched_setattr(0x0, &(0x7f0000000140)={0x82}, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x391401) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000001740)=0x3) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x2) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000100)=0x22) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2, 0xa}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop]}}}}}) 1.65583711s ago: executing program 1 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/52, 0x34}, {&(0x7f0000000a80)=""/204, 0xcc}], 0x8, &(0x7f0000000c00), 0x0, 0x844}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e44000204"], 0x47) 1.596709963s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x0, 0x87) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000000000001900000008000000e3", @ANYBLOB], 0x24}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x1b) socket$inet(0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b24e90000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25030000001400028006000b0002000000060002004e210000240002800800060002000000080003000300000008000300040000000800040030080000040002800c00038006000400d802000008000500050000000800050000ffffff1c00018008000b0073697000080008000800000008000500000000000800060007000000"], 0x90}, 0x1, 0x0, 0x0, 0x20040044}, 0x20008000) 813.744303ms ago: executing program 2 (id=95): epoll_create1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000f4a53716b045d3ed3ce59e5a7542d23904000000000000000000000000ef7ebe456f39f3bd2b71327e1ece7a18c1a463a64d5db294a19cc724fb9f61960bc4ff8fa2b231300006d665ce472058ac00972fb16edaf4139ac1a65d5a963996e63da6a68e74d6a3b3aa78b29427907eadbdc468c1452118ee102e910a7d802564e1011842c82fd79a5784987a912d0da50624b2068b64974bb3f11ea24fb8bfeea02611", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800800050003000000140035006d616373656330000000000000000000"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$hidraw(r2, &(0x7f0000001300)=""/153, 0x99) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)='\"', 0x1}], 0x1) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000040)={0x4, 0x2000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20, 0x6f2}, 0x10, 0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x0, 0x10, 0x2000}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400040082c104003e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 743.306898ms ago: executing program 3 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='afs_make_fs_calli\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) openat$audio(0xffffff9c, &(0x7f0000000080), 0x84203, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x4d8, 0x20, 0x108, 0x70bd26, 0x25dfdbfb, {0x1a}, [@generic="2d94f7bf32712ceba9aedcb5c11194e4963e6823a08766425b54de64549d87382eb1b68c88e8e219f7cf74ee66950a986a31340138049aa8a6c007d8925fdc6f7f1a4b8dffb7b4594337f34acc378e6ccf4c923f81d3bcb10e4abf06875b05cd9b0c1a371aa8764efa637a1ee07b6d6f1e", @generic="e4c727e31a30ecbb73db6706e2e91aa722f564a6e2b589bb9010240989ecf8df936727df21fb688781baf0c7fc358850bf1edb95c626cbeb870b419e023bcecb42f4486e43a76964a9bdc8fd330a047c831050d05fdcc02b68803145c6cb521762c2ab4c8e3b9e052c351ff6f425f30349821cf4afb32eb6b4f765835d689c2b42e200f9b7d6a11ea7a19005bad43e84da6c4b6b599f06393a7d8373ea9dd591d2494b8418296c97774cfee09746f1875de2c1eb4d4f5eb5edb70e7324c458", @nested={0x5a, 0x67, 0x0, 0x1, [@generic="68954e97ef889f5185e33bbed12ae7fa6e3915f152e91409a3b3affac5d13f47ce7189c2cb8c8501bfa9dc23d9b8d9356eb20a879211a90cc6b1ee9757271c51710ac4d70a920a221ca305a57b9e", @typed={0x8, 0x37, 0x0, 0x0, @pid}]}, @generic="56a3c166572a526b9dc944aeb71e848d5335396d88eeb74694fc5bbdcf8c320441f36304cea0bdbf7addf0f1c42fc7514ce01c86efd621839941af788e61b3497ca0c0ca9156761340c7de71679bbcb49fd4a82879ca98ab1000038f843c95aa0c68b12ebb81", @nested={0x2ce, 0xfe, 0x0, 0x1, [@typed={0xc, 0x30, 0x0, 0x0, @u64=0x498}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@private0}, @typed={0xc, 0xcb, 0x0, 0x0, @str='nl80211\x00'}, @generic="71767230b756e1763e3e848ed8c7225560170f75ea6c9bcd0db1855b40f54c618bb086e3d42c65aff1e56c13eb441afdbb882d55616e9c64c0131bfa8c25be806286bdbd27e9dc3bf8d84296a5cbc2640d7d0dfd475956fc38c02e0dd906844d8a5a627728777805f99525952208389c2ba350a0b384ba91a78b50e2e4d6e91bc0b3ddd62a3eab380101d82b2cb2bbedab3551cb58ca11b06bf30211ea96b9d60c54d2c09d97ea9f415c3427f1707771", @typed={0x16, 0xa8, 0x0, 0x0, @str='afs_make_fs_calli\x00'}, @generic="fc870fd1223fd078d7aba6762ac49b1e56b11436c3b77da7cce01ca94672015d4afb2593c506fa114f04b0164032ad64ad1fe81af3732058b3c318e123e4614051c4a5715498d34c45e39efea103b352901d13c0bd11b6b4c319f0da4320c15c9a518cf85d5639a39f84cea7c40d76cd2327d3e2b4c4ab", @generic="4fd5d6916a5b7175e463d49261bc3a2f81aa4807df2cdfd00c26bc37732b8078941b880780353764086c806e484f22d538b18db67e125c9aaa469a003ad1851a2654", @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}, @generic="cf2e4734028342930cfb47d0b8606849a03ba33ab845e0c218b052002dc96c4defdc6956fe414303c38b5243dc153ac07600b7e6bbeb27765e1cb6bb5524bad2b9579c042681c4dcdc7a4633e93e780e477644fd15035ec352d0f2caca0b430dc38986460f839bd21996078d537375431e8683d6a712f501db3de279cff46244e148e206fea43cfd739e1ff256f5bba9fde497345f6113c11c8f03fee03f5400fbd1cb271d8edb90097772188bb668801e2452dd197426363f718484e82b7a097d461fcf84ac017839d7ce87f879569f0f8763083276b2af0f505b3ede689844ad4f74074e7cf9d4", @generic="feee422f993f6ed6ab4af2203d99066a6fc9a0e4a339def4abca4f543eb4c1826716270730a6f7182470fb5c85"]}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) 686.819427ms ago: executing program 1 (id=107): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0711090800c8"], 0xa) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x8, 0x2}, 0x4) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04010420000000"], 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)}, &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000240)={r7, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r7, 0x6}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1c00c06b9da7f108000100000000003d0000004600004000000000008408ffffffffffac1414", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="be003f00907800000e0300050200000000000000000002d58838068b91000000"], 0x4e) chdir(&(0x7f0000000100)='./file0\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5001000010e8120400000000fcdbdf25ffffffff000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000008600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000006000000025cac5216d1c8af0a976902918bf448c5d9f5459"], 0x150}}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) 585.2539ms ago: executing program 3 (id=108): openat$dir(0xffffff9c, &(0x7f0000000080)='./file1\x00', 0x284000, 0x148) openat2$dir(0xffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x250080, 0x4, 0x4}, 0x18) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r1, {0x7, 0x28, 0x65c, 0x4204, 0x3, 0x6, 0x0, 0x9}}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x3}]}}}}}) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 474.623415ms ago: executing program 3 (id=109): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x6, 0xa, 0xffffffff, 0x2, 0x2, 0x3e7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000c8850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) socket(0x2, 0x0, 0xff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, &(0x7f0000000080)) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x4, {0xa, 0x4e23, 0x3, @loopback, 0x4000006}}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@timestamping={{0x10, 0x1, 0x25, 0x1d7}}], 0x10}, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x1ed}], 0x3}}], 0x4000000000001ee, 0x0) 474.21973ms ago: executing program 2 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000f00010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}}, 0x0) 374.119502ms ago: executing program 2 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/196, 0xc4}, {&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/52, 0x34}, {&(0x7f0000000a80)=""/204, 0xcc}], 0x8, &(0x7f0000000c00), 0x0, 0x844}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e44000204"], 0x47) 293.697547ms ago: executing program 2 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="303304f9543a078663d1af57405d4559f746b6f36b09fe488a558fb221aebc88c70c26a970ca732fc1fc208bba9676cfeda3bd0f570da69606c9f84b3a12f3df7993f60ef6e22c3f112449243e194b2293b26a628c1db8c945a72ca0136987561f055def1c6f4278d59ccd9040c0c241af9f0e76066c1813a49ce1b851621691133a4e5dad56dfac158b8a8191acb503988f269296b3103b8cf330fb4a6333c17977768e867a47d2de0a8d33cfaff79b129fd65aef80892cb5fe7b0e46a94658e7c34eb2915fdf89ff88607fbd690163"], 0x1c}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') unlink(&(0x7f0000000100)='./file0/file0\x00') openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$CAPI_GET_PROFILE(r5, 0xc0404309, &(0x7f00000002c0)=0x80000000) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0xc000000) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r7) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 66.187293ms ago: executing program 2 (id=113): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x1, 0x40010023, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = memfd_create(&(0x7f00000002c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80x0}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4e24, 0x4, 0x4e22, 0x0, 0x2, 0x0, 0xa0, 0x6, r2, 0xffffffffffffffff}, {0x7c, 0x1, 0x7, 0xbe3, 0x0, 0x0, 0x9, 0x9}, {0x7fff, 0x1, 0x400, 0x5}, 0xe, 0x6e6bb1, 0x2, 0x1, 0x3}, {{@in6=@empty, 0x4d6, 0xf}, 0xa, @in=@private=0xa010102, 0x3504, 0x4, 0x2, 0x80, 0x3, 0x0, 0x7}}, 0xe4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001280)=""/64, 0x40}, {&(0x7f0000000080)=""/64, 0x40}], 0x2, 0x800000, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000000000000090000000000000005000000010000000100000002000000000000007f000000000200008000"/84]) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x3) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45715' (ED25519) to the list of known hosts. [ 50.406168][ T5331] cgroup: Unknown subsys name 'net' [ 50.563116][ T5331] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.969444][ T5331] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.320172][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.329108][ T5361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.334564][ T5361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.338385][ T5361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.338746][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.342065][ T5363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.345181][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.352396][ T5354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.355404][ T5354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.358153][ T5354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.366958][ T5347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.370004][ T5347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.372569][ T5347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.378072][ T5357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.385946][ T5362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.390136][ T5362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.390362][ T5357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.397149][ T5357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.401163][ T5357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.401187][ T5362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.407805][ T5357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.411229][ T5357] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.411369][ T5362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.414615][ T5357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.675404][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 57.891899][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 57.932167][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.935932][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.938994][ T5345] bridge_slave_0: entered allmulticast mode [ 57.942549][ T5345] bridge_slave_0: entered promiscuous mode [ 57.950479][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.952865][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.956098][ T5345] bridge_slave_1: entered allmulticast mode [ 57.959357][ T5345] bridge_slave_1: entered promiscuous mode [ 58.004354][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 58.011445][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 58.090847][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.147564][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.150369][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.153201][ T5346] bridge_slave_0: entered allmulticast mode [ 58.158590][ T5346] bridge_slave_0: entered promiscuous mode [ 58.163309][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.206996][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.209957][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.213088][ T5346] bridge_slave_1: entered allmulticast mode [ 58.216156][ T5346] bridge_slave_1: entered promiscuous mode [ 58.341727][ T5345] team0: Port device team_slave_0 added [ 58.352394][ T5345] team0: Port device team_slave_1 added [ 58.376114][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.378612][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.380973][ T5348] bridge_slave_0: entered allmulticast mode [ 58.383591][ T5348] bridge_slave_0: entered promiscuous mode [ 58.445803][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.448450][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.450794][ T5348] bridge_slave_1: entered allmulticast mode [ 58.453469][ T5348] bridge_slave_1: entered promiscuous mode [ 58.461791][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.536728][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.540609][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.543837][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.549034][ T5356] bridge_slave_0: entered allmulticast mode [ 58.551723][ T5356] bridge_slave_0: entered promiscuous mode [ 58.556153][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.559479][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.574031][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.658042][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.661113][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.664154][ T5356] bridge_slave_1: entered allmulticast mode [ 58.668080][ T5356] bridge_slave_1: entered promiscuous mode [ 58.671912][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.674369][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.684270][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.692199][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.712161][ T5346] team0: Port device team_slave_0 added [ 58.768382][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.773032][ T5346] team0: Port device team_slave_1 added [ 58.799911][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.856142][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.888622][ T5348] team0: Port device team_slave_0 added [ 58.929336][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.932346][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.943281][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.000782][ T5348] team0: Port device team_slave_1 added [ 59.032585][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.035607][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.046336][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.055213][ T5356] team0: Port device team_slave_0 added [ 59.115809][ T5345] hsr_slave_0: entered promiscuous mode [ 59.118379][ T5345] hsr_slave_1: entered promiscuous mode [ 59.131243][ T5356] team0: Port device team_slave_1 added [ 59.134980][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.138080][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.151622][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.158888][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.161859][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.171195][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.317521][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.320387][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.330468][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.341251][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.344131][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.354432][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.427342][ T5362] Bluetooth: hci0: command tx timeout [ 59.427541][ T5353] Bluetooth: hci1: command tx timeout [ 59.430301][ T5362] Bluetooth: hci2: command tx timeout [ 59.432772][ T5357] Bluetooth: hci3: command tx timeout [ 59.441930][ T5346] hsr_slave_0: entered promiscuous mode [ 59.445307][ T5346] hsr_slave_1: entered promiscuous mode [ 59.450330][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.453807][ T5346] Cannot create hsr debugfs directory [ 59.477639][ T5348] hsr_slave_0: entered promiscuous mode [ 59.480959][ T5348] hsr_slave_1: entered promiscuous mode [ 59.484054][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.487342][ T5348] Cannot create hsr debugfs directory [ 59.676322][ T5356] hsr_slave_0: entered promiscuous mode [ 59.679024][ T5356] hsr_slave_1: entered promiscuous mode [ 59.681708][ T5356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.684495][ T5356] Cannot create hsr debugfs directory [ 59.910115][ T5345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.924130][ T5345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.952604][ T5345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.962308][ T5345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.025794][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.032057][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.041168][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.047967][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.090292][ T5348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.102108][ T5348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.108310][ T5348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.115021][ T5348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.162612][ T5356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.167380][ T5356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.171751][ T5356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.177202][ T5356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.262584][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.296063][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.309925][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.341909][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.344902][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.350392][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.353382][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.374943][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.396099][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.419419][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.430327][ T834] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.433192][ T834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.472466][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.475645][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.481468][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.484671][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.489625][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.492525][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.523681][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.573971][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.599653][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.623530][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.626489][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.634404][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.637460][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.653827][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.728694][ T5345] veth0_vlan: entered promiscuous mode [ 60.741538][ T5345] veth1_vlan: entered promiscuous mode [ 60.755883][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.790710][ T5345] veth0_macvtap: entered promiscuous mode [ 60.796972][ T5345] veth1_macvtap: entered promiscuous mode [ 60.833969][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.848070][ T5346] veth0_vlan: entered promiscuous mode [ 60.851958][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.865487][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.878627][ T5346] veth1_vlan: entered promiscuous mode [ 60.886042][ T5345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.890702][ T5345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.894543][ T5345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.899109][ T5345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.931593][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.962574][ T5348] veth0_vlan: entered promiscuous mode [ 60.990684][ T5348] veth1_vlan: entered promiscuous mode [ 61.001219][ T5346] veth0_macvtap: entered promiscuous mode [ 61.021876][ T789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.026557][ T789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.029112][ T5346] veth1_macvtap: entered promiscuous mode [ 61.081602][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.084933][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.091039][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.095397][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.101622][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.105966][ T5356] veth0_vlan: entered promiscuous mode [ 61.121658][ T5356] veth1_vlan: entered promiscuous mode [ 61.126713][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.130254][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.135518][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.158505][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.162216][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.165821][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.170010][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.177648][ T5348] veth0_macvtap: entered promiscuous mode [ 61.184966][ T5348] veth1_macvtap: entered promiscuous mode [ 61.260481][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.264943][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.269562][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.273924][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.280003][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.300418][ T5356] veth0_macvtap: entered promiscuous mode [ 61.305716][ T789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.312308][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.317574][ T789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.321051][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.325023][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.329716][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.335153][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.344174][ T5348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.348782][ T5348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.352468][ T5348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.356049][ T5348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.375392][ T5356] veth1_macvtap: entered promiscuous mode [ 61.399814][ T789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.403649][ T789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.418552][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.423168][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.428729][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.433578][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.440363][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.444108][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.449151][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.473937][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.478275][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.481732][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.485730][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.490653][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.495433][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.502168][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.506892][ T5357] Bluetooth: hci3: command tx timeout [ 61.507907][ T5362] Bluetooth: hci1: command tx timeout [ 61.509418][ T5357] Bluetooth: hci0: command tx timeout [ 61.511337][ T5362] Bluetooth: hci2: command tx timeout [ 61.528786][ T5356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.533092][ T5356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.539342][ T5356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.542860][ T5356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.592391][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.595571][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.645613][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.649266][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.697097][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.702614][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.734870][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.741569][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.807556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.903560][ T5427] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 61.962079][ T5426] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 61.965524][ T5426] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.117127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.434787][ T5444] FAULT_INJECTION: forcing a failure. [ 62.434787][ T5444] name failslab, interval 1, probability 0, space 0, times 1 [ 62.440284][ T5444] CPU: 1 UID: 0 PID: 5444 Comm: syz.0.11 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 62.444381][ T5444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.448711][ T5444] Call Trace: [ 62.450421][ T5444] [ 62.451690][ T5444] dump_stack_lvl+0x16c/0x1f0 [ 62.451795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.453660][ T5444] should_fail_ex+0x497/0x5b0 [ 62.458658][ T5444] ? fs_reclaim_acquire+0xae/0x160 [ 62.460891][ T5444] should_failslab+0xc2/0x120 [ 62.462887][ T5444] __kmalloc_cache_noprof+0x6b/0x310 [ 62.465074][ T5444] ? copy_mount_options+0x55/0x190 [ 62.467274][ T5444] copy_mount_options+0x55/0x190 [ 62.469359][ T5444] __ia32_sys_mount+0x1ad/0x310 [ 62.471365][ T5444] ? __pfx___ia32_sys_mount+0x10/0x10 [ 62.473713][ T5444] __do_fast_syscall_32+0x73/0x120 [ 62.476101][ T5444] do_fast_syscall_32+0x32/0x80 [ 62.478145][ T5444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.480741][ T5444] RIP: 0023:0xf748e579 [ 62.482339][ T5444] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.490224][ T5444] RSP: 002b:00000000f57a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 62.493666][ T5444] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 62.496928][ T5444] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000200004c0 [ 62.500174][ T5444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.503393][ T5444] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 62.506581][ T5444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.509477][ T5444] [ 62.989555][ T5456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 63.356951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.393140][ T39] audit: type=1326 audit(1721976423.737:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.3.15" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x0 [ 63.496258][ T5362] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 63.512051][ T5471] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 63.586624][ T5362] Bluetooth: hci0: command tx timeout [ 63.587541][ T4771] Bluetooth: hci1: command tx timeout [ 63.588588][ T5362] Bluetooth: hci3: command tx timeout [ 64.019112][ T5484] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 64.022296][ T5484] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.19'. [ 64.157822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.351318][ T5362] Bluetooth: hci3: unexpected cc 0x0402 length: 65 > 1 [ 64.359563][ T5498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 64.361059][ T5496] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 64.962823][ T39] audit: type=1326 audit(1721976425.307:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.0.28" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 65.409933][ T5522] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 65.413526][ T5522] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.29'. [ 65.491652][ T5529] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.516540][ T5362] Bluetooth: hci2: command tx timeout [ 65.669479][ T5362] Bluetooth: hci0: command tx timeout [ 65.676469][ T5362] Bluetooth: hci1: command tx timeout [ 65.747702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.775902][ T5362] Bluetooth: hci1: unexpected cc 0x0402 length: 65 > 1 [ 66.077759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.206719][ T5350] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.410723][ T5350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.415763][ T5350] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.422775][ T5350] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.427001][ T5350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.432685][ T5350] usb 7-1: config 0 descriptor?? [ 67.463983][ T5564] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 67.467620][ T5564] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.40'. [ 67.581803][ T5389] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.713070][ T39] audit: type=1326 audit(1721976428.057:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.41" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x0 [ 67.725045][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.733081][ T5549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.736462][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.771327][ T5350] usbhid 7-1:0.0: can't add hid device: -71 [ 67.774698][ T5350] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 67.783498][ T5350] usb 7-1: USB disconnect, device number 2 [ 67.783619][ T5389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.792025][ T5389] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.798581][ T5389] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.802545][ T5389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.810491][ T5389] usb 6-1: config 0 descriptor?? [ 68.087813][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.091333][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.095641][ T5557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.143950][ T5389] usbhid 6-1:0.0: can't add hid device: -71 [ 68.147568][ T5389] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 68.153165][ T5389] usb 6-1: USB disconnect, device number 2 [ 68.341870][ T5362] Bluetooth: hci2: unexpected cc 0x0402 length: 65 > 1 [ 68.397452][ T5362] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 68.401675][ T5362] Bluetooth: hci3: Injecting HCI hardware error event [ 68.405825][ T5362] Bluetooth: hci3: hardware error 0x00 [ 68.499730][ T4771] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 68.703565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.739490][ T5587] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 68.742884][ T5587] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.45'. [ 69.426794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.430065][ T5601] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 69.433009][ T5601] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.49'. [ 69.496565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.827100][ T4771] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 69.831328][ T4771] Bluetooth: hci1: Injecting HCI hardware error event [ 69.835059][ T5357] Bluetooth: hci1: hardware error 0x00 [ 69.886540][ T5390] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 70.080072][ T5390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.084226][ T5390] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.089712][ T5390] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.093412][ T5390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.099827][ T5390] usb 8-1: config 0 descriptor?? [ 70.337423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.338820][ T5606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.341206][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.359959][ T5390] usbhid 8-1:0.0: can't add hid device: -71 [ 70.362917][ T5390] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 70.370915][ T5390] usb 8-1: USB disconnect, device number 2 [ 70.466692][ T5362] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.058168][ T39] audit: type=1326 audit(1721976431.407:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.3.52" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x0 [ 71.797511][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.916583][ T5357] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 71.922806][ T5638] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 71.926054][ T5638] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.58'. [ 71.988808][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.993477][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.999275][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.003180][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.009467][ T10] usb 7-1: config 0 descriptor?? [ 72.069871][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.284716][ T789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.289098][ T789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.290001][ T5628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.327411][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 72.329670][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 72.334488][ T10] usb 7-1: USB disconnect, device number 3 [ 72.509407][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.691686][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.697348][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.703226][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.707526][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.714343][ T25] usb 8-1: config 0 descriptor?? [ 72.875549][ T5654] fuse: Bad value for 'fd' [ 72.950022][ T789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.954470][ T789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.955289][ T5647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.987519][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 72.990251][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 73.007481][ T25] usb 8-1: USB disconnect, device number 3 [ 73.052706][ T5357] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 73.657694][ T39] audit: type=1326 audit(1721976434.007:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5665 comm="syz.3.65" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x0 [ 74.522631][ T5677] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 74.525965][ T5677] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.67'. [ 74.683921][ T5682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.68'. [ 75.130300][ T5691] fuse: Bad value for 'fd' [ 76.140228][ T39] audit: type=1326 audit(1721976436.487:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.2.74" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x0 [ 76.205210][ T5362] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.209497][ T5362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.213071][ T5362] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.216993][ T5362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.220472][ T5362] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.224038][ T5362] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.394479][ T5709] chnl_net:caif_netlink_parms(): no params data found [ 76.512489][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.515677][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.519455][ T5709] bridge_slave_0: entered allmulticast mode [ 76.523023][ T5709] bridge_slave_0: entered promiscuous mode [ 76.528395][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.531442][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.534684][ T5709] bridge_slave_1: entered allmulticast mode [ 76.542682][ T5709] bridge_slave_1: entered promiscuous mode [ 76.629474][ T1370] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.631545][ T1370] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.638520][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.645935][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.694022][ T5709] team0: Port device team_slave_0 added [ 76.699721][ T5709] team0: Port device team_slave_1 added [ 76.705320][ T5721] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 76.708472][ T5721] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.77'. [ 76.757922][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.761648][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.774260][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.781698][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.785053][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.797021][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.913883][ T5709] hsr_slave_0: entered promiscuous mode [ 76.917950][ T5709] hsr_slave_1: entered promiscuous mode [ 76.922521][ T5709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.926178][ T5709] Cannot create hsr debugfs directory [ 76.929957][ T5726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'. [ 77.067783][ T5730] fuse: Bad value for 'fd' [ 77.167954][ T5709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.260326][ T5709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.392793][ T5709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.490663][ T5709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.493796][ T5357] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 77.630556][ T5709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.641429][ T5709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.648703][ T5709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.658528][ T5709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.731594][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.747710][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.755608][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.758548][ T5388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.767733][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.770532][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.806667][ T5709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.940935][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.981672][ T5709] veth0_vlan: entered promiscuous mode [ 77.991622][ T5709] veth1_vlan: entered promiscuous mode [ 78.021168][ T5709] veth0_macvtap: entered promiscuous mode [ 78.031440][ T5709] veth1_macvtap: entered promiscuous mode [ 78.050033][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.054466][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.059961][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.064469][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.070789][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.074864][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.078793][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.082181][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.088482][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.096047][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.100110][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.103742][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.107716][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.111164][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.114994][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.118743][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.123043][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.128597][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.137677][ T5709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.140972][ T5709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.144290][ T5709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.150880][ T5709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.213808][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.216573][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.244565][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.247916][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.309891][ T5357] Bluetooth: hci4: command tx timeout [ 78.686942][ T5340] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.879840][ T5340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.884638][ T5340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.890411][ T5340] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.894386][ T5340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.900474][ T5340] usb 5-1: config 0 descriptor?? [ 79.150528][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.154132][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.154992][ T5750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.189649][ T5340] usbhid 5-1:0.0: can't add hid device: -71 [ 79.192400][ T5340] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.198519][ T5340] usb 5-1: USB disconnect, device number 2 [ 79.817948][ T5756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 80.322653][ T5761] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 80.325710][ T5761] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.85'. [ 80.387369][ T5357] Bluetooth: hci4: command tx timeout [ 80.651996][ T39] audit: type=1326 audit(1721976440.997:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.0.87" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 81.403792][ T5781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 83.507199][ T5357] Bluetooth: hci4: command tx timeout [ 85.175442][ T5362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.180378][ T5362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.185150][ T5362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.190308][ T5362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.194398][ T5362] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.198078][ T5362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.378587][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 85.529378][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.532230][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.535446][ T5792] bridge_slave_0: entered allmulticast mode [ 85.540061][ T5792] bridge_slave_0: entered promiscuous mode [ 85.545543][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.549413][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.552971][ T5792] bridge_slave_1: entered allmulticast mode [ 85.557451][ T5792] bridge_slave_1: entered promiscuous mode [ 85.653624][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.661129][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.743329][ T5792] team0: Port device team_slave_0 added [ 85.750140][ T5792] team0: Port device team_slave_1 added [ 85.827157][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.830379][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.840706][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.847246][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.850067][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.860547][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.939341][ T5792] hsr_slave_0: entered promiscuous mode [ 85.943680][ T5792] hsr_slave_1: entered promiscuous mode [ 85.953652][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.957315][ T5792] Cannot create hsr debugfs directory [ 86.153810][ T5792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.270417][ T5792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.375985][ T5792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.465989][ T5792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.697429][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.704083][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.711316][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.720804][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.801263][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.820042][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.827530][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.830585][ T5389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.840288][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.843339][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.881684][ T1285] cfg80211: failed to load regulatory.db [ 87.030841][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.068061][ T5792] veth0_vlan: entered promiscuous mode [ 87.076824][ T5792] veth1_vlan: entered promiscuous mode [ 87.107918][ T5792] veth0_macvtap: entered promiscuous mode [ 87.114589][ T5792] veth1_macvtap: entered promiscuous mode [ 87.132857][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.138828][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.143083][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.148021][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.152243][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.157194][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.161467][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.165945][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.172159][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.176825][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.182896][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.192849][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.198496][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.202778][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.211102][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.215315][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.220230][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.224466][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.229293][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.233480][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.239418][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.245401][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.255283][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.259943][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.263765][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.268476][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.276692][ T5357] Bluetooth: hci5: command tx timeout [ 87.330716][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.336958][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.363642][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.369608][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.655409][ T5362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.663745][ T5362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.667576][ T5362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.673116][ T5362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.678900][ T5362] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.683650][ T5362] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.852317][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 87.876435][ T1285] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 87.980549][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.984017][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.999049][ T5812] bridge_slave_0: entered allmulticast mode [ 88.003075][ T5812] bridge_slave_0: entered promiscuous mode [ 88.008784][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.011354][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.013728][ T5812] bridge_slave_1: entered allmulticast mode [ 88.017007][ T5812] bridge_slave_1: entered promiscuous mode [ 88.069564][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.078205][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.082801][ T1285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.087615][ T1285] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.093153][ T1285] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.099365][ T1285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.104960][ T1285] usb 6-1: config 0 descriptor?? [ 88.150327][ T5812] team0: Port device team_slave_0 added [ 88.156550][ T5812] team0: Port device team_slave_1 added [ 88.232567][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.235670][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.246854][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.253625][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.256951][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.271488][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.392181][ T5812] hsr_slave_0: entered promiscuous mode [ 88.396035][ T5812] hsr_slave_1: entered promiscuous mode [ 88.400367][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.403539][ T5812] Cannot create hsr debugfs directory [ 88.555070][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.559661][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.570769][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.596045][ T1285] usbhid 6-1:0.0: can't add hid device: -71 [ 88.600427][ T1285] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 88.608843][ T1285] usb 6-1: USB disconnect, device number 3 [ 88.694315][ T5812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.847672][ T5812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.001895][ T5812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.087409][ T5812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.237164][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.244870][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.251496][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.258251][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.307237][ T5357] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 89.345990][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.365604][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.378591][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.381802][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.399564][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.402502][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.453311][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.581402][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.627209][ T5812] veth0_vlan: entered promiscuous mode [ 89.637352][ T5812] veth1_vlan: entered promiscuous mode [ 89.665834][ T5812] veth0_macvtap: entered promiscuous mode [ 89.676097][ T5812] veth1_macvtap: entered promiscuous mode [ 89.699163][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.703748][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.708307][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.712862][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.717427][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.722081][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.726817][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.731442][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.735767][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.740439][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.744674][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.749239][ T5357] Bluetooth: hci6: command tx timeout [ 89.751943][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.758360][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.767159][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.771657][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.775996][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.780820][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.785167][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.789864][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.794178][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.799897][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.804260][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.808949][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.813223][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.817668][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.823671][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.832340][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.835620][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.838776][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.842348][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906801][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.912554][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.936250][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.939946][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.058260][ T5834] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 90.580580][ T5841] process 'syz.3.96' launched './file2' with NULL argv: empty string added [ 90.584978][ T5841] FAULT_INJECTION: forcing a failure. [ 90.584978][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 90.591271][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.3.96 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 90.595703][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.600478][ T5841] Call Trace: [ 90.601957][ T5841] [ 90.603331][ T5841] dump_stack_lvl+0x16c/0x1f0 [ 90.605550][ T5841] should_fail_ex+0x497/0x5b0 [ 90.608049][ T5841] ? fs_reclaim_acquire+0xae/0x160 [ 90.610385][ T5841] should_failslab+0xc2/0x120 [ 90.612497][ T5841] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 90.615005][ T5841] ? prepare_creds+0x2e/0x750 [ 90.617219][ T5841] ? __pfx___up_read+0x10/0x10 [ 90.619713][ T5841] prepare_creds+0x2e/0x750 [ 90.621744][ T5841] prepare_exec_creds+0x10/0x240 [ 90.623947][ T5841] bprm_execve+0xc2/0x1960 [ 90.625935][ T5841] ? __pfx_get_arg_page+0x10/0x10 [ 90.628169][ T5841] ? __pfx__printk+0x10/0x10 [ 90.630226][ T5841] ? __pfx_bprm_execve+0x10/0x10 [ 90.632441][ T5841] ? put_page+0xdb/0x280 [ 90.634969][ T5841] ? copy_string_kernel+0x1d4/0x210 [ 90.635019][ T5841] do_execveat_common.isra.0+0x4f1/0x630 [ 90.635051][ T5841] __ia32_compat_sys_execveat+0xe0/0x120 [ 90.635081][ T5841] __do_fast_syscall_32+0x73/0x120 [ 90.635109][ T5841] do_fast_syscall_32+0x32/0x80 [ 90.635133][ T5841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.635154][ T5841] RIP: 0023:0xf7f70579 [ 90.635169][ T5841] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.635183][ T5841] RSP: 002b:00000000f570557c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 90.635201][ T5841] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 90.635213][ T5841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.635223][ T5841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.635234][ T5841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.635244][ T5841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.635267][ T5841] [ 90.719476][ T5362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.723275][ T5362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.726761][ T5362] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.730312][ T5362] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.734682][ T5362] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.743512][ T5362] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.956682][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.131468][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.134748][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.138140][ T5844] bridge_slave_0: entered allmulticast mode [ 91.141839][ T5844] bridge_slave_0: entered promiscuous mode [ 91.150328][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.153216][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.157030][ T5844] bridge_slave_1: entered allmulticast mode [ 91.160411][ T5844] bridge_slave_1: entered promiscuous mode [ 91.249929][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.258775][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.276546][ T5357] Bluetooth: hci5: command tx timeout [ 91.334328][ T5844] team0: Port device team_slave_0 added [ 91.352606][ T5844] team0: Port device team_slave_1 added [ 91.438311][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.441426][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.452510][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.459920][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.464027][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.475173][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.581195][ T5844] hsr_slave_0: entered promiscuous mode [ 91.584920][ T5844] hsr_slave_1: entered promiscuous mode [ 91.591103][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.594434][ T5844] Cannot create hsr debugfs directory [ 91.774013][ T5844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.826563][ T5357] Bluetooth: hci6: command tx timeout [ 91.880342][ T5844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.966829][ T5844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.137159][ T5844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.160776][ T5362] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 92.164775][ T5362] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 92.183482][ T5362] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 92.188135][ T5362] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 92.193047][ T5362] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 92.196882][ T5362] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 92.359542][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.367766][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.394874][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.416096][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.484973][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 92.703774][ T5863] Zero length message leads to an empty skb [ 92.739432][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.743078][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.745957][ T5854] bridge_slave_0: entered allmulticast mode [ 92.750561][ T5854] bridge_slave_0: entered promiscuous mode [ 92.755236][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.760220][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.764485][ T5854] bridge_slave_1: entered allmulticast mode [ 92.783321][ T5854] bridge_slave_1: entered promiscuous mode [ 92.787016][ T5357] Bluetooth: hci7: command tx timeout [ 92.860840][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.870490][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.881127][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.956326][ T5854] team0: Port device team_slave_0 added [ 92.965807][ T5854] team0: Port device team_slave_1 added [ 93.056170][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.068357][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.071452][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.085740][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.093223][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.096480][ T5410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.101758][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.105014][ T5410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.121177][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.124285][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.135271][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.264810][ T5854] hsr_slave_0: entered promiscuous mode [ 93.272534][ T5854] hsr_slave_1: entered promiscuous mode [ 93.279819][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.283729][ T5854] Cannot create hsr debugfs directory [ 93.358857][ T5357] Bluetooth: hci5: command tx timeout [ 93.412558][ T5410] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 93.605438][ T5357] Bluetooth: hci5: unexpected cc 0x0402 length: 65 > 1 [ 93.616281][ T5410] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.622228][ T5410] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.641522][ T5410] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.646681][ T5410] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.652345][ T5410] usb 8-1: config 0 descriptor?? [ 93.661801][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.703524][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.742896][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.793536][ T39] audit: type=1326 audit(1721976454.137:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.1.105" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x0 [ 93.850106][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.926840][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.930628][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.939315][ T5873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.945780][ T5844] veth0_vlan: entered promiscuous mode [ 93.964656][ T5410] usbhid 8-1:0.0: can't add hid device: -71 [ 93.967814][ T5410] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.984005][ T5410] usb 8-1: USB disconnect, device number 4 [ 93.984899][ T5854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.023471][ T5844] veth1_vlan: entered promiscuous mode [ 94.059171][ T5844] veth0_macvtap: entered promiscuous mode [ 94.070231][ T5844] veth1_macvtap: entered promiscuous mode [ 94.104132][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.109364][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.113559][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.118955][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.123195][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.128074][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.132943][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.137739][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.142017][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.146559][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.150486][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.154818][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.159299][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.163395][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.169134][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.183901][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.188759][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.193138][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.197972][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.203626][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.208323][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.212662][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.217619][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.221976][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.226849][ T5357] Bluetooth: hci8: command tx timeout [ 94.230980][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.235319][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.240016][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.244332][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.249008][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.255236][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.266003][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.278141][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.284464][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.290992][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294269][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.297450][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300753][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.307948][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.356982][ T789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.360728][ T789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.383774][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.388277][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.442627][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.479740][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.511913][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.514917][ T5340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.524695][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.527922][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.593570][ T5914] Bluetooth: MGMT ver 1.23 [ 94.618451][ T5908] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 94.621045][ T5908] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.95'. [ 94.729714][ T5357] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 94.860056][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.876847][ T5357] Bluetooth: hci7: command tx timeout [ 94.897435][ T5357] Bluetooth: hci7: unexpected cc 0x0402 length: 65 > 1 [ 94.964921][ T5854] veth0_vlan: entered promiscuous mode [ 94.986121][ T5854] veth1_vlan: entered promiscuous mode [ 95.015699][ T5854] veth0_macvtap: entered promiscuous mode [ 95.023492][ T5854] veth1_macvtap: entered promiscuous mode [ 95.043788][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.048368][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.052307][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.057299][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.061223][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.065691][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.069222][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.072764][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.076297][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.081130][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.085341][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.090093][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.093660][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.098911][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.103248][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.108902][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.115678][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.126253][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.132581][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.137119][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.141739][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.145761][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.150653][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.155220][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.159397][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.163326][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.167808][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.172282][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.176207][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.180199][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.184529][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.188982][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.192909][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.200612][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.208566][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.212198][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.215841][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.219575][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.297693][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.303284][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.342449][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.345327][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.362236][ T5945] UBIFS error (pid: 5945): cannot open "./file0", error -22 [ 95.374907][ C1] Oops: general protection fault, probably for non-canonical address 0xfbfffb8000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 95.383354][ C1] KASAN: maybe wild-memory-access in range [0xdffffc0000000000-0xdffffc0000000007] [ 95.388993][ C1] CPU: 1 UID: 0 PID: 5945 Comm: syz.2.113 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 95.393665][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.398098][ C1] RIP: 0010:__dev_flush+0x49/0x1e0 [ 95.400455][ C1] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 95.408449][ C1] RSP: 0018:ffffc90000598c90 EFLAGS: 00010a06 [ 95.411014][ C1] RAX: dffffc0000000000 RBX: dffffbffffffff80 RCX: ffffffff88f0abcb [ 95.414640][ C1] RDX: 1bffff8000000000 RSI: ffffffff81b14976 RDI: ffffc900036b7a58 [ 95.417969][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 95.421326][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900036b7a48 [ 95.424685][ C1] R13: ffff88802c140648 R14: ffffc900036b7a58 R15: ffffc900036b7a58 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 95.427998][ C1] FS: 0000000000000000(0000) GS:ffff88802c100000(0063) knlGS:00000000f56d5b40 [ 95.431807][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 95.434608][ C1] CR2: 0000000020287000 CR3: 0000000029326000 CR4: 0000000000350ef0 [ 95.437962][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.441245][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.444151][ C1] Call Trace: [ 95.445335][ C1] [ 95.446478][ C1] ? show_regs+0x8c/0xa0 [ 95.448304][ C1] ? die_addr+0x4f/0xd0 [ 95.450195][ C1] ? exc_general_protection+0x155/0x230 [ 95.452506][ C1] ? asm_exc_general_protection+0x26/0x30 [ 95.454997][ C1] ? xdp_do_check_flushed+0x21b/0x4e0 [ 95.457619][ C1] ? __dev_flush+0x16/0x1e0 [ 95.459691][ C1] ? __dev_flush+0x49/0x1e0 [ 95.461828][ C1] xdp_do_check_flushed+0x40a/0x4e0 [ 95.463778][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 95.465648][ C1] net_rx_action+0xa92/0x1010 [ 95.467295][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 95.469137][ C1] ? __pfx_mark_lock+0x10/0x10 [ 95.470957][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 95.473080][ C1] ? sched_clock+0x38/0x60 [ 95.474957][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 95.476885][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.479250][ C1] ? mark_held_locks+0x9f/0xe0 [ 95.481124][ C1] handle_softirqs+0x216/0x8f0 [ 95.482910][ C1] ? __pfx_rcu_exp_handler+0x10/0x10 [ 95.485267][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 95.487813][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 95.489967][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 95.491843][ C1] do_softirq+0xb2/0xf0 [ 95.493563][ C1] [ 95.494772][ C1] [ 95.496251][ C1] __local_bh_enable_ip+0x100/0x120 [ 95.498642][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 95.500966][ C1] __dev_queue_xmit+0x882/0x4300 [ 95.503239][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 95.505327][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 95.507362][ C1] ? call_rcu_zapped+0x20/0xb0 [ 95.509226][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 95.511328][ C1] ? __pfx_mark_lock+0x10/0x10 [ 95.513246][ C1] ? find_held_lock+0x2d/0x110 [ 95.515294][ C1] ? __ip_finish_output+0x49e/0x950 [ 95.517714][ C1] ? __pfx_lock_release+0x10/0x10 [ 95.520211][ C1] ? mark_held_locks+0x9f/0xe0 [ 95.522281][ C1] ip_finish_output2+0x16c1/0x2590 [ 95.524731][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 95.527178][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 95.529315][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 95.531511][ C1] __ip_finish_output+0x49e/0x950 [ 95.533643][ C1] ip_finish_output+0x31/0x310 [ 95.535641][ C1] ip_output+0x13b/0x2a0 [ 95.537437][ C1] ? __pfx_ip_output+0x10/0x10 [ 95.539483][ C1] ip_local_out+0x33e/0x4a0 [ 95.541459][ C1] __ip_queue_xmit+0x747/0x1940 [ 95.543526][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 95.545852][ C1] __tcp_transmit_skb+0x2a3a/0x3da0 [ 95.548152][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 95.550458][ C1] ? __pfx_lock_release+0x10/0x10 [ 95.552577][ C1] ? mark_held_locks+0x9f/0xe0 [ 95.554631][ C1] tcp_write_xmit+0x185b/0x87f0 [ 95.556712][ C1] ? mptcp_sched_get_send+0x378/0x6e0 [ 95.559039][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 95.561408][ C1] tcp_push+0x221/0x6f0 [ 95.563176][ C1] mptcp_push_release.isra.0+0xa8/0xe0 [ 95.565473][ C1] __mptcp_push_pending+0x400/0x560 [ 95.567691][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 95.570099][ C1] ? __virt_addr_valid+0x5e/0x590 [ 95.572003][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 95.574255][ C1] ? __phys_addr_symbol+0x30/0x80 [ 95.576148][ C1] ? __check_object_size+0x497/0x720 [ 95.578117][ C1] mptcp_sendmsg+0xce5/0x1f20 [ 95.579911][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 95.581839][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.583711][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 95.585624][ C1] inet_sendmsg+0x119/0x140 [ 95.587345][ C1] __sys_sendto+0x42c/0x4e0 [ 95.589037][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 95.590920][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 95.592929][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.595076][ C1] __ia32_sys_sendto+0xdd/0x1b0 [ 95.597136][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.599357][ C1] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 95.601900][ C1] __do_fast_syscall_32+0x73/0x120 [ 95.604006][ C1] do_fast_syscall_32+0x32/0x80 [ 95.605964][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.608733][ C1] RIP: 0023:0xf7f48579 [ 95.610380][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.617316][ C1] RSP: 002b:00000000f56d557c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 95.620435][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 95.623490][ C1] RDX: 0000000000300000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.626444][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.629415][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.632050][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.634665][ C1] [ 95.635698][ C1] Modules linked in: [ 95.636941][ C1] ---[ end trace 0000000000000000 ]--- [ 95.638672][ C1] RIP: 0010:__dev_flush+0x49/0x1e0 [ 95.640785][ C1] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 95.647980][ C1] RSP: 0018:ffffc90000598c90 EFLAGS: 00010a06 [ 95.649793][ C1] RAX: dffffc0000000000 RBX: dffffbffffffff80 RCX: ffffffff88f0abcb [ 95.652107][ C1] RDX: 1bffff8000000000 RSI: ffffffff81b14976 RDI: ffffc900036b7a58 [ 95.654488][ C1] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 95.657698][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900036b7a48 [ 95.660354][ C1] R13: ffff88802c140648 R14: ffffc900036b7a58 R15: ffffc900036b7a58 [ 95.662811][ C1] FS: 0000000000000000(0000) GS:ffff88802c100000(0063) knlGS:00000000f56d5b40 [ 95.666396][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 95.668876][ C1] CR2: 0000000020287000 CR3: 0000000029326000 CR4: 0000000000350ef0 [ 95.671882][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.675264][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.679251][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 95.682936][ C1] Kernel Offset: disabled [ 95.685001][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:47:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880682ad000 RCX=1ffff1100d055a00 RDX=0000000000000200 RSI=0000000000000000 RDI=ffffed100d055a00 RBP=0000000000001000 RSP=ffffc900035274d8 R8 =0000000000000001 R9 =fffff9400034156e R10=ffffea0001a0ab77 R11=dffffc0000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8b057d00 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f4cf0000 CR3=0000000018130000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f9d405 RDI=ffffffff951143c0 RBP=ffffffff95114380 RSP=ffffc900005986f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6d203a4e4153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff84f9d3a0 R15=0000000000000000 RIP=ffffffff84f9d42f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020287000 CR3=0000000029326000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000046c00000000 0000000e00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000102 RBX=ffffc90000540b88 RCX=ffffffff813c7fb9 RDX=ffff888016b14880 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000540b00 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=1ffff1100c712fe4 R12=ffffffff81004dda R13=0000000000000000 R14=ffffc90000540c48 R15=ffffc90000540bbd RIP=ffffffff818b1d38 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000055fca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff81692ad9 RDX=0000000000000000 RSI=ffffffff8bb04860 RDI=ffff8880207ca884 RBP=ffff8880207ca440 RSP=ffffc90006c07b68 R8 =0000000000000000 R9 =fffffbfff2021d8b R10=ffffffff9010ec5f R11=ffffffff8b4f4ac0 R12=ffff8880207ca440 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8172224b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f312d013270 CR3=000000005ab3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000