last executing test programs: 26.011563458s ago: executing program 2 (id=3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = dup(r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001440)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x6, 0x20, 0x68, 0x0, 0xe3, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, "5d8375322b8239d20b4fb806"}}}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000007940), 0x55, 0x0, 0x0) r9 = syz_open_pts(r0, 0x141601) write(r9, 0x0, 0x0) 25.070102436s ago: executing program 2 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="0000000000000000b70300000800000085000000690000009553ea44c2e9a7865a3d9723411343df8370f40d5555fea678dfc2fb7f896641", @ANYRES64=r2, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$full(0xffffff9c, &(0x7f0000000280), 0x24cac2, 0x0) setsockopt$MRT_PIM(r8, 0x0, 0xcf, &(0x7f0000000140)=0x3, 0x4) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r12, &(0x7f0000000180), 0x12) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)) 4.048865046s ago: executing program 1 (id=359): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x328, 0x18, 0x0, 0x70bd2a, 0x25dfdbfe, {0x12}, [@nested={0x9b, 0x117, 0x0, 0x1, [@generic="54f8c0d24a6a1c5ffaaa7c8e2d21ea7f7fa40effec27a34fa7109f5ee79b783ec3062dff5111691d1c7bcd8865abac4f1f523d9e7df7857be847b390895e887344589e7c549026f56390227e3de90fecd209408aecb99f456befcfa094c4da54f08f50105938ffdd19df9279c3ee1df7aae2b96911651f896bb45ef54e1cc37cd3e121489d1f357ff2b65ec48bc7f7a043c3bd", @typed={0x4, 0xef}]}, @generic="108a49954afa23bd979545d0fbb75c39744fe940348022b845ea510816e21a", @nested={0x64, 0xad, 0x0, 0x1, [@generic="a42183288157e4aab9f7871dc29f9c3ee95c6b7947f72c3100c93324ea2f7b3dcdd396289a703857f186a712406e65e51ba315568c79b8c3ac681379ce617b8515ee68764a6f797a4c51d0119247c723", @typed={0x8, 0x119, 0x0, 0x0, @pid}, @typed={0x8, 0x16, 0x0, 0x0, @uid=0xee01}]}, @nested={0x6f, 0xa4, 0x0, 0x1, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast2}, @generic, @generic="fd16cf54438d9780f38cb2ad99b7a3ec62acc26199f66cbb2a228d12bd447c611e18ee28e172d1984bd6851804b6d0da321d08be40af4d8621674807616f5805305145058044ab9da649e132b4011d2d5eca3fdb6893c4"]}, @generic="f80c4eaa40b263010bf0037534db40eae1df6cc97cd5a25d96cc7fcc8f1728475453f055e1f686b900fdb0cc180e2d505792a4ee54ee97116c77b11360c529cc0a985a6e1e85df7779282aef2e8d16107ddfe47ba10a4cf8c0272fb090e536c9b52bfd8536af1098f946e044c73c8ea6982556cdee913a1062221062e7584dd8bfa3d7279b482c0a9172a35acac264ec32651fdff5ae0ebdaf1666b3909deec22e1ea0da5a62da1ec5fadfd6f8482cf991ee953d427fa5b72dcd07d86f4970d2384930c4b408ee1fbfad53bb1558dc4176185a23cb3f", @generic="708ae2e4955ffe9b363c87d4e5761d8cadebf2dbeae3c5dd160bd0ba3cc2a3f609448bd8b8f2bcaba647b5f0db798b8690a049132a299c38909e416de59230ec0dd8027fd4bd3f2cbb353567c5c3593e9d20d442dd5998509dddc8662dbddbdc96450106915ded889ec1c98f6d1bb1244099e57e0823a6fc8399669f6cd2d81a8ab5a0d6a376e79e6edd8e87903b1ae82875f2fa2e448b0a926084ee0c747b5ef0fe48174c", @typed={0x8, 0x4a, 0x0, 0x0, @fd}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4050) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x7) (async) r1 = socket$inet6(0xa, 0x3, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) socket$inet(0xa, 0x801, 0x84) (async) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='/dev/snd/timer\x00') (async) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='/dev/snd/timer\x00') 3.420289285s ago: executing program 1 (id=361): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x5, 0x0, 0xc, 0x40100, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x6, @void, @value, @void, @value}, 0x50) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e657200000048000280080002400000008408000340000000b1080004400000000f080001400000000024000580090001006d6574610000000014000280eaff024000000010080001400000000e0900010073797a30000000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffffffffffffff8f}, {&(0x7f0000000600)=""/161, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$rds(0x15, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b0009008000", 0x2c}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18}) r8 = syz_open_procfs(r3, &(0x7f0000000300)='net/xfrm_stat\x00') read$FUSE(r8, &(0x7f0000003040)={0x2020}, 0x2020) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r8, 0xc040564b, &(0x7f0000000400)={0xe946, 0x0, 0x2016, 0x2, 0x821, {0x1, 0x6}}) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x35}, 0x1, 0x0, 0x0, 0xc800}, 0x4c810) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xfffffffc) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000280)={0x2, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0}], &(0x7f0000000240)=[0x9, 0x1]}, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) 2.24019705s ago: executing program 1 (id=363): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = dup(r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001440)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x6, 0x20, 0x68, 0x0, 0xe3, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, "5d8375322b8239d20b4fb806"}}}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.950139121s ago: executing program 1 (id=367): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.89918853s ago: executing program 0 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x541b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="0000000000000000b7020017aff8080000030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000757571477ac8bf2af689c3e469907b59b6d2998ec529c3e975ba81baf069aef50e05b3a268b1f053b08dce7b9702a900"/154], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xb8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x1}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xffff9}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xb8}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 1.898691179s ago: executing program 1 (id=370): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = dup(r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001440)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x6, 0x20, 0x68, 0x0, 0xe3, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, "5d8375322b8239d20b4fb806"}}}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.659767567s ago: executing program 1 (id=371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002480)={0xfffffffffffffdca, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4}, 0x0, 0x0, 0x0}, 0x0) 990.252489ms ago: executing program 0 (id=375): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="40010000100013070000000000000000fe880000000800000000000000000001fe8000000000000000000000000000aa00000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053500000a0003000000000008001600000000004c0012007063727970742861757468656e6365736e287467723139322d67656e657269632c636263286361737436292929000000000000000000000000000000000000000000000000020000"], 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) mknodat$loop(r2, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) (async) mknodat$loop(r2, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000200)={r3}) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000200)={r3}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(r6, &(0x7f0000000240)='./file1\x00', 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0xff, 0xb, 0x4, 0x2000, 0x401, {}, {0x2, 0x0, 0xcf, 0x3, 0xc0, 0x8, "65ec72bb"}, 0x4, 0x2, {0x0}, 0x9}) (async) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0xff, 0xb, 0x4, 0x2000, 0x401, {}, {0x2, 0x0, 0xcf, 0x3, 0xc0, 0x8, "65ec72bb"}, 0x4, 0x2, {0x0}, 0x9}) 989.834877ms ago: executing program 0 (id=376): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x430500, 0x0) (async) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x80000000}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000021c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002140)='./file0\x00'}) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000007b01"]) 840.049942ms ago: executing program 0 (id=377): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x101000) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x9204, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b8192300100000fe8000000000000000000000000000aafe800000000f000000000000000000aa8901000001000000310001000502fffd"], 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r4, &(0x7f0000000300)='(', 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x10, 0x0, 0xfd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x40, r7, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c4e1575b6a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x50000}, 0x0) r10 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003"], 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) 579.93783ms ago: executing program 0 (id=380): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 559.509598ms ago: executing program 3 (id=381): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000000), 0x4800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fdatasync(0xffffffffffffffff) 558.208259ms ago: executing program 0 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x541b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000040)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32, @ANYBLOB="0000000000000000b7020017aff8080000030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000757571477ac8bf2af689c3e469907b59b6d2998ec529c3e975ba81baf069aef50e05b3a268b1f053b08dce7b9702a900"/154], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xb8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x1}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_MPLS_OPTS={0x28, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xffff9}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xb8}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 557.461837ms ago: executing program 3 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006a0003012a247000ffffffff021b00000000000008000500", @ANYRES32, @ANYBLOB="04000b000400090008000a"], 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000040), 0x80, &(0x7f0000922000/0x1000)=nil, 0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 480.341494ms ago: executing program 3 (id=384): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0xfc9f, 0x20, 0x7fffffffffffffff, 0x2}, &(0x7f00000000c0)=0x18) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x3, 0xa, 0x0, 0x0, [{{r1}, 0x5}, {{r0}, 0x3ff}, {{r0}, 0x3}, {{r0}, 0x7}, {{r0}, 0x9}, {{}, 0xfffffffffffffff8}, {{r1}, 0xb}, {{r0}, 0x5}, {{r2}, 0x1ff}, {{r1}}]}) 480.03449ms ago: executing program 3 (id=385): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = dup(r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001440)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x6, 0x20, 0x68, 0x0, 0xe3, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, "5d8375322b8239d20b4fb806"}}}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r8, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 249.846474ms ago: executing program 3 (id=386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = dup(r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001440)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x6, 0x20, 0x68, 0x0, 0xe3, 0x21, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, "5d8375322b8239d20b4fb806"}}}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0xc8, 0x4f8, 0xc8, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4, 0x0, 0x40, 0x0, 0x2, 0xf8e74ba, 0xfe8c, 0x5d8}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @local, @remote, @private1, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000006c0)="52c7bfa4944cc0adb7d5da1d617083312c53220aca8e289297e7757c4af0889f3dee4de37eb55aee02d360405158a5b507bd9409821c4268746cf45cb4fcc887bf6e7a7f8aafc2a7c3db8d4d742df29a194fc15dd3a43d6b49776c43ed2de143ef4508095c4157d4c30676ba42460a80de535570d903a4678cc1b58db79750328a8c01cdb7507adf7ffe5aaadf3ebf531c626488a97475a220eb1b7de23354f5274189d85e6f5e61985d07891af8308f2bf9236301787ac6c71213db405e953cda454e08bde128957b0e2c60f841b89cf24a0491d758822e2ae0c851b98710be814e74d6692bb8b41c08c0", &(0x7f00000007c0)="12503bf3c5147d7fbbfb1560d718fb9886cd6fdcfb8f57e2969f7c0d5bcee57132924dc88e93d98f1cfc24186c7e2a459b61e24be1b3373c522ac1fe0db37fe92fc9fd6bc3e1fc34e804645f2b4ba9cc7571f0ab2c1e59fea7c51e773d0b249c6b56d1d7afd3d87ec324af0725530a09f446bf750645364a6d4d964441d3ae61c61b3bc2ae4b466f80a04811a773496491fb13c6da890b6c599409d0c75428e6b7d8c629680457ba4aef8a7a0e82e93f04d312620f98689ee26db4ba1e08ec8d88072a2711aa47297f50e1241b5c4710cf4a75f8e40fc7d70e5c0ec1f54a3485a7bc9f0362c1f2"}}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0086401, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x100, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x20040840) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') capset(0x0, 0x0) mprotect(&(0x7f0000035000/0xc00000)=nil, 0xc00000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f00000008c0)={@id={0x2, 0x0, @d}}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) write$binfmt_elf32(r9, &(0x7f0000000640)=ANY=[], 0xffffffffffffffc9) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21618' (ED25519) to the list of known hosts. [ 33.267043][ T5323] cgroup: Unknown subsys name 'net' [ 33.409947][ T5323] cgroup: Unknown subsys name 'cpuset' [ 33.415320][ T5323] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.200303][ T5323] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.792646][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.803564][ T5359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.805564][ T5359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.807935][ T5359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.810102][ T5359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.812450][ T5351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.812470][ T5359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.812606][ T5359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.816111][ T5361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.817696][ T5359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.820054][ T5361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.822706][ T5359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.823814][ T5361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.826595][ T5359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.827213][ T5360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.828674][ T5351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.828687][ T5360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.828983][ T5360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.829101][ T5360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.830550][ T5359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.832792][ T5351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.842810][ T5359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.843937][ T5351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.846536][ T5359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.971566][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 37.032241][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 37.075160][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 37.078890][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 37.089924][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.092150][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.094052][ T5355] bridge_slave_0: entered allmulticast mode [ 37.097061][ T5355] bridge_slave_0: entered promiscuous mode [ 37.115632][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.118203][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.120652][ T5355] bridge_slave_1: entered allmulticast mode [ 37.123435][ T5355] bridge_slave_1: entered promiscuous mode [ 37.176841][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.178703][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.180455][ T5357] bridge_slave_0: entered allmulticast mode [ 37.182399][ T5357] bridge_slave_0: entered promiscuous mode [ 37.207074][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.208885][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.210657][ T5357] bridge_slave_1: entered allmulticast mode [ 37.212506][ T5357] bridge_slave_1: entered promiscuous mode [ 37.238126][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.273273][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.275116][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.277155][ T5349] bridge_slave_0: entered allmulticast mode [ 37.279256][ T5349] bridge_slave_0: entered promiscuous mode [ 37.283001][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.286794][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.297805][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.299631][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.301781][ T5349] bridge_slave_1: entered allmulticast mode [ 37.304220][ T5349] bridge_slave_1: entered promiscuous mode [ 37.333574][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.369034][ T5355] team0: Port device team_slave_0 added [ 37.379765][ T5357] team0: Port device team_slave_0 added [ 37.381677][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.383535][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.385392][ T5345] bridge_slave_0: entered allmulticast mode [ 37.389187][ T5345] bridge_slave_0: entered promiscuous mode [ 37.392802][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.395097][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.397534][ T5345] bridge_slave_1: entered allmulticast mode [ 37.399794][ T5345] bridge_slave_1: entered promiscuous mode [ 37.403302][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.406649][ T5355] team0: Port device team_slave_1 added [ 37.409145][ T5357] team0: Port device team_slave_1 added [ 37.434037][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.453161][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.456057][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.457715][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.463870][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.482809][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.485495][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.487562][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.494301][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.508445][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.510277][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.518217][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.546417][ T5349] team0: Port device team_slave_0 added [ 37.548894][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.551012][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.558062][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.565611][ T5345] team0: Port device team_slave_0 added [ 37.568507][ T5349] team0: Port device team_slave_1 added [ 37.589494][ T5345] team0: Port device team_slave_1 added [ 37.623091][ T5355] hsr_slave_0: entered promiscuous mode [ 37.625525][ T5355] hsr_slave_1: entered promiscuous mode [ 37.643692][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.645525][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.654300][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.667461][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.669312][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.675813][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.679672][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.681392][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.688296][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.697863][ T5357] hsr_slave_0: entered promiscuous mode [ 37.699969][ T5357] hsr_slave_1: entered promiscuous mode [ 37.701639][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.703883][ T5357] Cannot create hsr debugfs directory [ 37.705697][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.707826][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.715324][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.764223][ T5349] hsr_slave_0: entered promiscuous mode [ 37.766335][ T5349] hsr_slave_1: entered promiscuous mode [ 37.768071][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.769979][ T5349] Cannot create hsr debugfs directory [ 37.824343][ T5345] hsr_slave_0: entered promiscuous mode [ 37.826376][ T5345] hsr_slave_1: entered promiscuous mode [ 37.828318][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.830156][ T5345] Cannot create hsr debugfs directory [ 38.011526][ T5355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.040546][ T5355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.043821][ T5355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.047058][ T5355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.070670][ T5349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.075135][ T5349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.080188][ T5349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.085623][ T5349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.105228][ T5357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.109258][ T5357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.113629][ T5357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.117996][ T5357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.150326][ T5345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.154539][ T5345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.159218][ T5345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.163858][ T5345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.241119][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.245402][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.252456][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.271686][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.278152][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.284617][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.287274][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.301847][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.303681][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.306456][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.308322][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.312444][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.319929][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.321877][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.337809][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.340149][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.360062][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.361870][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.377628][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.402110][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.417589][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.419433][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.422013][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.424697][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.445651][ T5345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.482320][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.497942][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.508523][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.520610][ T5357] veth0_vlan: entered promiscuous mode [ 38.534787][ T5357] veth1_vlan: entered promiscuous mode [ 38.540898][ T5349] veth0_vlan: entered promiscuous mode [ 38.554417][ T5355] veth0_vlan: entered promiscuous mode [ 38.559032][ T5349] veth1_vlan: entered promiscuous mode [ 38.562369][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.567748][ T5355] veth1_vlan: entered promiscuous mode [ 38.582541][ T5357] veth0_macvtap: entered promiscuous mode [ 38.585334][ T5349] veth0_macvtap: entered promiscuous mode [ 38.590048][ T5349] veth1_macvtap: entered promiscuous mode [ 38.594219][ T5355] veth0_macvtap: entered promiscuous mode [ 38.600512][ T5355] veth1_macvtap: entered promiscuous mode [ 38.607880][ T5357] veth1_macvtap: entered promiscuous mode [ 38.620515][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.625159][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.631996][ T5349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.634332][ T5349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.636804][ T5349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.638924][ T5349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.642739][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.645427][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.648986][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.673313][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.676166][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.679290][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.683071][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.687070][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.690412][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.694050][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.698575][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.703022][ T5345] veth0_vlan: entered promiscuous mode [ 38.707412][ T5355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.709811][ T5355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.712032][ T5355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.714283][ T5355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.717750][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.720555][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.723106][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.725785][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.729748][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.734604][ T5357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.737749][ T5357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.740140][ T5357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742131][ T5357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.758514][ T5345] veth1_vlan: entered promiscuous mode [ 38.776188][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.779081][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.803136][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.806905][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.824365][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.830693][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.833603][ T5345] veth0_macvtap: entered promiscuous mode [ 38.836983][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.838916][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.839921][ T5349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.860281][ T5345] veth1_macvtap: entered promiscuous mode [ 38.867676][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.870043][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.874123][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.877967][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.887418][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.891537][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.893748][ T5410] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.894753][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.898291][ T5359] Bluetooth: hci1: command tx timeout [ 38.899218][ T5410] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.901383][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.901540][ T5350] Bluetooth: hci0: command tx timeout [ 38.901753][ T5350] Bluetooth: hci3: command tx timeout [ 38.901852][ T5350] Bluetooth: hci2: command tx timeout [ 38.912748][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.915426][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.919567][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.928233][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.932525][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.935813][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.939758][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.942805][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.950781][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.957039][ T5412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 38.957400][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.962760][ T5345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965092][ T5345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.970609][ T5345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.973069][ T5345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.987802][ T5412] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 38.997862][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.045647][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.049623][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.082181][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.084712][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.210024][ T5418] fuse: Unknown parameter 'ûd¡' [ 39.231549][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.588704][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 40.036795][ T5413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.156669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 40.163216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 40.306046][ T1411] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 40.436088][ T1411] usb 8-1: device descriptor read/64, error -71 [ 40.683982][ T1411] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 40.946320][ T1411] usb 8-1: device descriptor read/64, error -71 [ 40.976173][ T5359] Bluetooth: hci2: command tx timeout [ 40.978763][ T5359] Bluetooth: hci1: command tx timeout [ 40.980514][ T5359] Bluetooth: hci3: command tx timeout [ 41.056161][ T4782] Bluetooth: hci0: command tx timeout [ 41.059289][ T1411] usb usb8-port1: attempt power cycle [ 41.220180][ T39] audit: type=1326 audit(1729730344.433:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.227908][ T39] audit: type=1326 audit(1729730344.433:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.234454][ T39] audit: type=1326 audit(1729730344.433:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.241010][ T39] audit: type=1326 audit(1729730344.433:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.247832][ T39] audit: type=1326 audit(1729730344.443:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.254890][ T39] audit: type=1326 audit(1729730344.443:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.260862][ T39] audit: type=1326 audit(1729730344.443:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.267239][ T39] audit: type=1326 audit(1729730344.443:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.305736][ T39] audit: type=1326 audit(1729730344.513:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.311994][ T39] audit: type=1326 audit(1729730344.513:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.0.12" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf746e5a7 code=0x7ffc0000 [ 41.350056][ T5456] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 41.396185][ T1411] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 41.416953][ T1411] usb 8-1: device descriptor read/8, error -71 [ 41.527968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 41.656028][ T1411] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 41.676778][ T1411] usb 8-1: device descriptor read/8, error -71 [ 41.796360][ T1411] usb usb8-port1: unable to enumerate USB device [ 42.126165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 42.477514][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 42.876985][ T5470] netlink: 416 bytes leftover after parsing attributes in process `syz.3.17'. [ 42.880161][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 42.903240][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 42.956239][ T5453] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.056845][ T5359] Bluetooth: hci1: command tx timeout [ 43.056909][ T5350] Bluetooth: hci2: command tx timeout [ 43.058718][ T4782] Bluetooth: hci3: command tx timeout [ 43.118640][ T5453] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 43.121789][ T5453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.124768][ T5453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.127611][ T5453] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 43.132676][ T5453] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 43.135107][ T5453] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 43.137576][ T5453] usb 6-1: Manufacturer: syz [ 43.142995][ T5453] usb 6-1: config 0 descriptor?? [ 43.581911][ T5453] usbhid 6-1:0.0: can't add hid device: -32 [ 43.584589][ T5453] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 44.510300][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 44.590852][ T5493] netlink: 'syz.3.24': attribute type 9 has an invalid length. [ 44.592868][ T5493] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.24'. [ 45.136102][ T5350] Bluetooth: hci3: command tx timeout [ 45.136127][ T5359] Bluetooth: hci1: command tx timeout [ 45.138017][ T4782] Bluetooth: hci2: command tx timeout [ 45.404082][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 45.407146][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 45.720894][ T5572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.60'. [ 45.721964][ T5408] usb 6-1: USB disconnect, device number 2 [ 45.820551][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 45.823184][ T5582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 45.825706][ T5584] Zero length message leads to an empty skb [ 45.827790][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 45.830380][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 45.833890][ T5582] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 45.836455][ T5582] nbd: error processing sock list [ 45.995415][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 46.034096][ T5602] netlink: 'syz.1.73': attribute type 9 has an invalid length. [ 46.365106][ T5619] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.493815][ T5637] netlink: 'syz.1.89': attribute type 11 has an invalid length. [ 46.563582][ T5646] vcan0: MTU too low for tipc bearer [ 46.565062][ T5646] tipc: Enabling of bearer rejected, failed to enable media [ 46.600748][ T5652] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 46.603192][ T5652] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 47.206559][ T5670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.211858][ T5670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.216688][ T5670] bond0 (unregistering): Released all slaves [ 47.319497][ T5672] openvswitch: netlink: Missing valid actions attribute. [ 47.322034][ T5672] openvswitch: netlink: Actions may not be safe on all matching packets [ 47.459484][ C0] Unknown status report in ack skb [ 47.492320][ T5684] syzkaller0: entered promiscuous mode [ 47.493798][ T5684] syzkaller0: entered allmulticast mode [ 47.497234][ T64] syzkaller0: tun_net_xmit 48 [ 47.503203][ T5684] syzkaller0: create flow: hash 4101357084 index 1 [ 47.532970][ T5683] syzkaller0: delete flow: hash 4101357084 index 1 [ 48.314084][ T5698] tipc: Started in network mode [ 48.315857][ T5698] tipc: Node identity c69787177406, cluster identity 4711 [ 48.320376][ T5698] tipc: Enabled bearer , priority 0 [ 48.345420][ T5698] tipc: Resetting bearer [ 48.355268][ T5697] tipc: Resetting bearer [ 48.394956][ T5702] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 49.182481][ T5697] tipc: Disabling bearer [ 49.346135][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.351505][ T5738] bond0: entered promiscuous mode [ 49.353314][ T5738] bond_slave_0: entered promiscuous mode [ 49.354957][ T5738] bond_slave_1: entered promiscuous mode [ 49.412063][ T5748] warning: `syz.1.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.499411][ T5759] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 49.673000][ T5774] __nla_validate_parse: 12 callbacks suppressed [ 49.673011][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 49.699753][ T5779] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.719032][ T5776] trusted_key: syz.0.147 sent an empty control message without MSG_MORE. [ 49.955445][ T5359] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 49.963599][ T5359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 49.966966][ T5359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 49.970447][ T5359] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 49.973351][ T5359] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 49.976869][ T5359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 50.070949][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 50.156738][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.159267][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.161771][ T5796] bridge_slave_0: entered allmulticast mode [ 50.164685][ T5796] bridge_slave_0: entered promiscuous mode [ 50.170464][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.173051][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.175668][ T5796] bridge_slave_1: entered allmulticast mode [ 50.179495][ T5796] bridge_slave_1: entered promiscuous mode [ 50.207340][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.225582][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.230857][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.257057][ T5796] team0: Port device team_slave_0 added [ 50.259662][ T5796] team0: Port device team_slave_1 added [ 50.278175][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.280039][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.287451][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.302475][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.309062][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.311575][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.318899][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.346935][ T5796] hsr_slave_0: entered promiscuous mode [ 50.349056][ T5796] hsr_slave_1: entered promiscuous mode [ 50.351095][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.353702][ T5796] Cannot create hsr debugfs directory [ 50.371382][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.429139][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.443486][ T5811] netlink: 76 bytes leftover after parsing attributes in process `syz.1.157'. [ 50.531341][ T64] bridge_slave_1: left allmulticast mode [ 50.533948][ T64] bridge_slave_1: left promiscuous mode [ 50.537057][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.544317][ T64] bridge_slave_0: left allmulticast mode [ 50.547592][ T64] bridge_slave_0: left promiscuous mode [ 50.549893][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.791597][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.797446][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.800988][ T64] bond0 (unregistering): Released all slaves [ 50.819093][ T5817] bond0: entered promiscuous mode [ 50.820542][ T5817] bond_slave_0: entered promiscuous mode [ 50.822185][ T5817] bond_slave_1: entered promiscuous mode [ 50.862810][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.936802][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 51.007620][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.165'. [ 51.010597][ T5836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 51.013011][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.165'. [ 51.016033][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.165'. [ 51.022672][ T5851] netlink: 188 bytes leftover after parsing attributes in process `syz.1.171'. [ 51.027899][ T5851] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 51.030885][ T5851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 51.239704][ T64] hsr_slave_0: left promiscuous mode [ 51.242287][ T64] hsr_slave_1: left promiscuous mode [ 51.245183][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.249700][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.253132][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.255565][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.272239][ T64] veth1_macvtap: left promiscuous mode [ 51.273879][ T64] veth0_macvtap: left promiscuous mode [ 51.275452][ T64] veth1_vlan: left promiscuous mode [ 51.276985][ T64] veth0_vlan: left promiscuous mode [ 51.483871][ T5883] syz.1.178 (5883) used greatest stack depth: 20704 bytes left [ 51.840413][ T64] team0 (unregistering): Port device team_slave_1 removed [ 51.910416][ T64] team0 (unregistering): Port device team_slave_0 removed [ 52.017708][ T4782] Bluetooth: hci4: command tx timeout [ 52.350878][ T5894] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 52.411494][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.416257][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.419511][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.422748][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.484718][ T5918] netlink: 76 bytes leftover after parsing attributes in process `syz.3.188'. [ 52.511208][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.525977][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.531253][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.533590][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.540667][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.543026][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.568335][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.691926][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.714553][ T5796] veth0_vlan: entered promiscuous mode [ 52.727269][ T5796] veth1_vlan: entered promiscuous mode [ 52.742200][ T5796] veth0_macvtap: entered promiscuous mode [ 52.745404][ T5796] veth1_macvtap: entered promiscuous mode [ 52.751038][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.754875][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.761351][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.765103][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.769757][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.773563][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.779343][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.794988][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.799793][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.803312][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.807867][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.811473][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.815152][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.820147][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.827429][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.830558][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.833641][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.836871][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.972921][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.975035][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.030953][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.033588][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.096184][ T4782] Bluetooth: hci4: command tx timeout [ 54.430218][ T6059] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 54.561171][ T6076] Bluetooth: MGMT ver 1.23 [ 54.772654][ T6107] __nla_validate_parse: 6 callbacks suppressed [ 54.772664][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 54.788309][ T6109] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.118388][ T6151] infiniband syz0: set active [ 55.120459][ T6151] infiniband syz0: added team0 [ 55.141289][ T6151] RDS/IB: syz0: added [ 55.142618][ T6151] smc: adding ib device syz0 with port count 1 [ 55.144301][ T6151] smc: ib device syz0 port 1 has pnetid [ 55.625502][ T6176] netlink: 'syz.1.297': attribute type 9 has an invalid length. [ 55.628627][ T6176] netlink: 90940 bytes leftover after parsing attributes in process `syz.1.297'. [ 55.663789][ T6178] nftables ruleset with unbound chain [ 55.791388][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'. [ 56.067770][ T6209] syzkaller1: entered promiscuous mode [ 56.069509][ T6209] syzkaller1: entered allmulticast mode [ 56.100200][ T6213] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 56.125132][ T6215] vxcan1: entered promiscuous mode [ 56.129153][ T6215] vxcan1: left promiscuous mode [ 56.130455][ T6215] vxcan1: entered allmulticast mode [ 56.155659][ T6217] vcan0: entered allmulticast mode [ 56.157616][ T6217] vcan0: left allmulticast mode [ 56.176157][ T4782] Bluetooth: hci4: command tx timeout [ 56.202884][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'. [ 56.374610][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 56.486076][ T1411] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.641259][ T1411] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.645234][ T1411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.649200][ T1411] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.652415][ T1411] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.660496][ T1411] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.663648][ T1411] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.666731][ T1411] usb 5-1: Manufacturer: syz [ 56.670238][ T1411] usb 5-1: config 0 descriptor?? [ 56.716509][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 57.083739][ T1411] usbhid 5-1:0.0: can't add hid device: -32 [ 57.085342][ T1411] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 57.162971][ T39] kauditd_printk_skb: 42 callbacks suppressed [ 57.162987][ T39] audit: type=1326 audit(1729730360.373:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.170731][ T39] audit: type=1326 audit(1729730360.373:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.177619][ T39] audit: type=1326 audit(1729730360.373:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.184088][ T39] audit: type=1326 audit(1729730360.373:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.189649][ T39] audit: type=1326 audit(1729730360.373:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.195125][ T39] audit: type=1326 audit(1729730360.373:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc15a7 code=0x7ffc0000 [ 57.200645][ T39] audit: type=1326 audit(1729730360.373:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.206080][ T39] audit: type=1326 audit(1729730360.373:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc15a7 code=0x7ffc0000 [ 57.211521][ T39] audit: type=1326 audit(1729730360.373:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.216948][ T39] audit: type=1326 audit(1729730360.373:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.3.328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 57.289317][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.329'. [ 57.678479][ T6253] netlink: 'syz.1.331': attribute type 11 has an invalid length. [ 57.680743][ T6253] netlink: 'syz.1.331': attribute type 11 has an invalid length. [ 57.683541][ T6253] netlink: 209800 bytes leftover after parsing attributes in process `syz.1.331'. [ 58.139876][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 58.256096][ T4782] Bluetooth: hci4: command tx timeout [ 58.564983][ T6269] tmpfs: Bad value for 'mpol' [ 58.680575][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 58.870796][ T6279] netlink: 'syz.3.341': attribute type 11 has an invalid length. [ 58.994022][ T6289] ======================================================= [ 58.994022][ T6289] WARNING: The mand mount option has been deprecated and [ 58.994022][ T6289] and is ignored by this kernel. Remove the mand [ 58.994022][ T6289] option from the mount to silence this warning. [ 58.994022][ T6289] ======================================================= [ 59.235303][ T6301] mmap: syz.1.346 (6301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.247894][ T25] usb 5-1: USB disconnect, device number 2 [ 59.489298][ T6316] nbd1: detected capacity change from 0 to 22 [ 59.502143][ T6307] block nbd1: shutting down sockets [ 59.758979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.759169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.830679][ T62] libceph: connect (1)[c::]:6789 error -101 [ 59.832937][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 59.926866][ T6336] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 59.928948][ T6336] __nla_validate_parse: 3 callbacks suppressed [ 59.928956][ T6336] netlink: 33 bytes leftover after parsing attributes in process `syz.1.354'. [ 59.934159][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.937010][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.944693][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.946778][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.949444][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.951539][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.955373][ T6336] bridge0: entered promiscuous mode [ 59.957432][ T6336] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 60.046059][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 60.109207][ T62] libceph: connect (1)[c::]:6789 error -101 [ 60.111330][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 60.198264][ T25] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 60.201985][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.204803][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.207649][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.211981][ T25] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 60.214396][ T25] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 60.216676][ T25] usb 8-1: Manufacturer: syz [ 60.219192][ T25] usb 8-1: config 0 descriptor?? [ 60.631322][ T9] libceph: connect (1)[c::]:6789 error -101 [ 60.636751][ T25] usbhid 8-1:0.0: can't add hid device: -32 [ 60.638349][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 60.639410][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 60.643805][ T6331] ceph: No mds server is up or the cluster is laggy [ 60.693716][ T6343] netlink: 'syz.1.357': attribute type 3 has an invalid length. [ 60.695968][ T6343] netlink: 666 bytes leftover after parsing attributes in process `syz.1.357'. [ 61.305133][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 61.756117][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.929013][ T25] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 61.931442][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.933631][ T25] usb 6-1: Product: syz [ 61.934765][ T25] usb 6-1: Manufacturer: syz [ 61.936255][ T25] usb 6-1: SerialNumber: syz [ 61.938726][ T25] usb 6-1: config 0 descriptor?? [ 62.152223][ T25] usb 6-1: USB disconnect, device number 3 [ 62.288426][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 62.695246][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 62.829387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 62.831859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.834048][ T62] usb 8-1: USB disconnect, device number 6 [ 62.839919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.928765][ T39] kauditd_printk_skb: 430 callbacks suppressed [ 62.928779][ T39] audit: type=1326 audit(1729730366.143:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.939571][ T39] audit: type=1326 audit(1729730366.143:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.947609][ T39] audit: type=1326 audit(1729730366.143:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.956255][ T39] audit: type=1326 audit(1729730366.143:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.965003][ T39] audit: type=1326 audit(1729730366.143:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.973792][ T39] audit: type=1326 audit(1729730366.143:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.984435][ T39] audit: type=1326 audit(1729730366.143:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 62.992521][ T39] audit: type=1326 audit(1729730366.143:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 63.000579][ T39] audit: type=1326 audit(1729730366.143:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 63.009068][ T39] audit: type=1326 audit(1729730366.143:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 63.077779][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 63.129469][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 63.516089][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.619652][ T6396] binder: 6395:6396 ioctl c0306201 20000480 returned -22 [ 63.667513][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 63.671301][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.675032][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.681866][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 63.693666][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 63.697007][ T25] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 63.699851][ T25] usb 6-1: Manufacturer: syz [ 63.703703][ T25] usb 6-1: config 0 descriptor?? [ 63.704500][ T6397] tmpfs: Bad value for 'mpol' [ 63.891787][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 64.094841][ T6416] netlink: 'syz.0.377': attribute type 11 has an invalid length. [ 64.113891][ T25] usbhid 6-1:0.0: can't add hid device: -32 [ 64.116084][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 64.164339][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 64.439741][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 64.936878][ T6443] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' SYZFAIL: bad allocate request allocated=0 size=1986355743/1986355744 (errno 9: Bad file descriptor) [ 65.088390][ T94] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.170684][ T94] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.302597][ T5453] usb 6-1: USB disconnect, device number 4 [ 65.347565][ T94] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.426591][ T94] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.554037][ T94] bridge_slave_1: left allmulticast mode [ 65.555735][ T94] bridge_slave_1: left promiscuous mode [ 65.557462][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.561153][ T94] bridge_slave_0: left allmulticast mode [ 65.562685][ T94] bridge_slave_0: left promiscuous mode [ 65.564191][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.757661][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.760069][ T94] bond_slave_0: left promiscuous mode [ 65.764049][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.767052][ T94] bond_slave_1: left promiscuous mode [ 65.769391][ T94] bond0 (unregistering): Released all slaves [ 65.859478][ T94] tipc: Left network mode [ 66.127675][ T94] hsr_slave_0: left promiscuous mode [ 66.129482][ T94] hsr_slave_1: left promiscuous mode [ 66.131455][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.133633][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.135841][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.138027][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.150994][ T94] veth1_macvtap: left promiscuous mode [ 66.152455][ T94] veth0_macvtap: left promiscuous mode [ 66.153916][ T94] veth1_vlan: left promiscuous mode [ 66.155362][ T94] veth0_vlan: left promiscuous mode [ 66.625660][ T94] team0 (unregistering): Port device team_slave_1 removed [ 66.684746][ T94] team0 (unregistering): Port device team_slave_0 removed [ 67.492865][ T94] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.547568][ T94] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.645976][ T94] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.705613][ T94] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.803106][ T94] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.885394][ T94] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.946768][ T94] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.013513][ T94] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.093531][ T94] bridge_slave_1: left allmulticast mode [ 68.095068][ T94] bridge_slave_1: left promiscuous mode [ 68.097471][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.100308][ T94] bridge_slave_0: left allmulticast mode [ 68.101793][ T94] bridge_slave_0: left promiscuous mode [ 68.103331][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.106692][ T94] bridge_slave_1: left allmulticast mode [ 68.108176][ T94] bridge_slave_1: left promiscuous mode [ 68.109665][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.112379][ T94] bridge_slave_0: left allmulticast mode [ 68.113874][ T94] bridge_slave_0: left promiscuous mode [ 68.115386][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.363059][ T94] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 68.365346][ T94] bridge0 (unregistering): left promiscuous mode [ 68.471514][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.475390][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.479194][ T94] bond0 (unregistering): Released all slaves [ 68.531625][ T94] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.534017][ T94] bond_slave_0: left promiscuous mode [ 68.536887][ T94] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.539391][ T94] bond_slave_1: left promiscuous mode [ 68.541649][ T94] bond0 (unregistering): Released all slaves [ 69.009445][ T94] hsr_slave_0: left promiscuous mode [ 69.011586][ T94] hsr_slave_1: left promiscuous mode [ 69.013888][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.016561][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.018880][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.021015][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.025820][ T94] hsr_slave_0: left promiscuous mode [ 69.028447][ T94] hsr_slave_1: left promiscuous mode [ 69.030969][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.033446][ T94] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.035870][ T94] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.038442][ T94] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.072858][ T94] veth1_macvtap: left promiscuous mode [ 69.074378][ T94] veth0_macvtap: left promiscuous mode [ 69.076108][ T94] veth1_vlan: left promiscuous mode [ 69.077816][ T94] veth0_vlan: left promiscuous mode [ 69.081052][ T94] veth1_macvtap: left promiscuous mode [ 69.082887][ T94] veth0_macvtap: left promiscuous mode [ 69.084756][ T94] veth1_vlan: left promiscuous mode [ 69.096084][ T94] veth0_vlan: left promiscuous mode [ 69.185139][ T94] infiniband syz0: set down [ 69.618514][ T94] team0 (unregistering): Port device team_slave_1 removed [ 69.673140][ T94] team0 (unregistering): Port device team_slave_0 removed [ 70.500808][ T94] team0 (unregistering): Port device team_slave_1 removed [ 70.552973][ T94] team0 (unregistering): Port device team_slave_0 removed [ 70.910833][ T1133] smc: removing ib device syz0 VM DIAGNOSIS: 00:39:28 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea0001323400 RCX=ffffffff81c4325c RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000399f840 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea0001323400 R13=0000000000000000 R14=0000000000000040 R15=ffffea0001323400 RIP=ffffffff818cb8d3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fc6e40 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f745bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000778000000000 RBX=0000000062ea4c00 RCX=ffffffff813e969a RDX=ffff8880295fc880 RSI=ffffffff813e96a8 RDI=ffff8880e2ea4c00 RBP=ffff8880e2ea4c00 RSP=ffffc90002d5f6e0 R8 =0000000000000006 R9 =ffff888062ea4c00 R10=ffff8880e2ea4c00 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=ffffed100c5d4984 R15=ffff888062ea4c2c RIP=ffffffff813e96b8 RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f744c230 CR3=000000005f66e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000320 0000025800000190 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000b0653 RBX=0000000000000002 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe23c3de7c CR3=000000005995e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000008a525 RBX=0000000000000003 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036ec488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b762440 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000