last executing test programs: 3m6.810707412s ago: executing program 32 (id=2769): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) 2m32.889497666s ago: executing program 33 (id=3217): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8, 0x4, 0x3) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000240)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @none, 0xfe}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87c"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1100"], 0xa) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000580)={0x1, {{0xa, 0x4e23, 0x103, @mcast2, 0xfffffffc}}, {{0xa, 0x0, 0x6, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0x8000}}}, 0x108) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r0, @ANYBLOB="20002cbd7000fcdbdf250e0000003400028006000f000000000008000900fbffffff05000d0001000000080004008000000006000b000200000006000b0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc0200000000000000002d05684a0000140003006970"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m30.534600261s ago: executing program 34 (id=3235): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1) 2m26.687091498s ago: executing program 35 (id=3256): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getuid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007039b"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 2m7.260756879s ago: executing program 36 (id=3299): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000ffe606000000850000006100000085000000070000009500000018ed2496cb504a962a00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r6, r7, 0x0, 0xffffffff000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r8, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000002880)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) 2m1.26981051s ago: executing program 8 (id=3374): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xfff2}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000800) 2m0.990567967s ago: executing program 8 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x2000040) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="8fc8c1418f1f"}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000a40)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16002182973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bbabe7c7cfe8798164fd994e5b08e0b066dfd508c94a5ab1155474b865ef076f864fe867431930a7534040dc2e6262a772589f066552a4a653579aa326913926d8ef74f1b5dc87107c4847ce2b8620fd6c1eacfc8710baa17d0c8", 0x9a}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {0x0}], 0x3}, 0x200048c0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x68458be498713be9}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4004) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="02a42dbd7000fcf50bf92500000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=@newtaction={0xd4, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x3, {}, [{0xc0, 0x1, [@m_gact={0xbc, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x8f, 0x6, "7018f56bf02057b821478b1eb70896df6ad7f93d2c2de4a7c495807aed359873bcdcd06f1d7ec377f6f989073233a6cd00a81d3c8af92da51169df45af437cfe19a1abf072d998265763b2b6a9d66010b6878d593fc0b8f2e6ce8479ecc3357795cf811e1a23a685b8ab9166b1206891fcc52d3a838ecce4cf7abc9d4b68e5bd4da6537f919256afccd500"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xd4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) r10 = socket$kcm(0x2, 0x914a0a0533fbf869, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m0.856889985s ago: executing program 8 (id=3396): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x2000040) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="8fc8c1418f1f"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000a40)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16002182973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bbabe7c7cfe8798164fd994e5b08e0b066dfd508c94a5ab1155474b865ef076f864fe867431930a7534040dc2e6262a772589f066552a4a653579aa326913926d8ef74f1b5dc87107c4847ce2b8620fd6c1eacfc8710baa17d0c8", 0x9a}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000200)="6fe4dd9e32204ff54c172e9a440284ed55de044bd3774461", 0x18}, {&(0x7f0000000ec0)="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", 0x27b}], 0x4}, 0x200048c0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x68458be498713be9}, 0xc, &(0x7f0000000980)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4004) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="02a42dbd7000fcf50bf92500000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=@newtaction={0xd4, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x3, {}, [{0xc0, 0x1, [@m_gact={0xbc, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x8f, 0x6, "7018f56bf02057b821478b1eb70896df6ad7f93d2c2de4a7c495807aed359873bcdcd06f1d7ec377f6f989073233a6cd00a81d3c8af92da51169df45af437cfe19a1abf072d998265763b2b6a9d66010b6878d593fc0b8f2e6ce8479ecc3357795cf811e1a23a685b8ab9166b1206891fcc52d3a838ecce4cf7abc9d4b68e5bd4da6537f919256afccd500"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xd4}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) r11 = socket$kcm(0x2, 0x914a0a0533fbf869, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m0.730699776s ago: executing program 8 (id=3397): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) dup(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x22003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x668, 0x8, 0xb5b}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x10}) close_range(r1, r3, 0x0) 2m0.640263808s ago: executing program 8 (id=3399): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r5, 0x0) 2m0.27014832s ago: executing program 8 (id=3403): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8, 0x4, 0x3) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000240)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @none, 0xfe}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1100"], 0xa) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000580)={0x1, {{0xa, 0x4e23, 0x103, @mcast2, 0xfffffffc}}, {{0xa, 0x0, 0x6, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0x8000}}}, 0x108) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r0, @ANYBLOB="20002cbd7000fcdbdf250e0000003400028006000f000000000008000900fbffffff05000d0001000000080004008000000006000b000200000006000b0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc0200000000000000002d05684a0000140003006970"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m58.067967869s ago: executing program 37 (id=3345): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x124, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x0, 0x9, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 1m45.062900802s ago: executing program 38 (id=3403): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8, 0x4, 0x3) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000240)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, @none, 0xfe}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1100"], 0xa) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000580)={0x1, {{0xa, 0x4e23, 0x103, @mcast2, 0xfffffffc}}, {{0xa, 0x0, 0x6, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0x8000}}}, 0x108) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r0, @ANYBLOB="20002cbd7000fcdbdf250e0000003400028006000f000000000008000900fbffffff05000d0001000000080004008000000006000b000200000006000b0002000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc0200000000000000002d05684a0000140003006970"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m4.641087835s ago: executing program 3 (id=3808): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) pipe(0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000000c0)=0x9, 0x4) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) 1m3.629258983s ago: executing program 3 (id=3819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1m3.407951498s ago: executing program 3 (id=3820): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x3, 0x5}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.493420645s ago: executing program 3 (id=3836): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) 1m2.370204306s ago: executing program 3 (id=3838): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r5, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r6, 0x0) 1m2.018029189s ago: executing program 3 (id=3846): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) 55.169888649s ago: executing program 0 (id=3879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x4000c}}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x40}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x2, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 55.080226833s ago: executing program 0 (id=3880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 54.966347401s ago: executing program 0 (id=3881): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x3, 0xff) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d", @ANYRES8=r0], 0x22) 54.830239905s ago: executing program 0 (id=3882): r0 = getpid() capget(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000280)={0x4, 0x2, 0x2, 0xef8, 0xce7f, 0x8000}) 54.757474307s ago: executing program 0 (id=3883): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r5, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r6, 0x0) 54.412731241s ago: executing program 0 (id=3885): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x3, 0x5}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.042085198s ago: executing program 6 (id=3888): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x4000c}}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x40}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x2, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 53.979041711s ago: executing program 6 (id=3889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 53.978384681s ago: executing program 6 (id=3890): openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x3, 0xff) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d", @ANYRES8=r0], 0x22) 53.8597937s ago: executing program 6 (id=3891): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 52.949315228s ago: executing program 6 (id=3893): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r5, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r6, 0x0) 52.72578331s ago: executing program 6 (id=3894): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000740)={{0x0}, 0x0}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000240)="a17aad53f37a5c78cb4ac3917a", 0xd) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r6, 0x3ff, 0x0, 0x7}) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="8b7720ab48c52f64c8cff0731b215f910500eb9ca3d63581cc5b921cf7b67a286ec2ce539afd42e7f7575b92b71a8d515ce43adc78085672990e913247db94ff0aedaba3ba4a7a358d24946edc914b2c90621f51d0d3806af70180000075b4135d882abd4b194cf9acad2b900525d106c87f9409d2c22881e607c971c434f4c739e0879fb5cde63a66f47e6bdd017b8c61b61dc57fb52301ce5922cd4d77a78cfcd25d6d2a67ee", 0xa7}, {&(0x7f0000000340)="57506a4634777a4c7efbd2586b6f078bc5210537563c33d817a7e6b2032d16a2122f15442469a233a76cbe52f8c4643312fda68176bd7f", 0x37}], 0x2}}], 0x1, 0x4001c00) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x401, 0x76}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 47.011583345s ago: executing program 39 (id=3846): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) 42.190277053s ago: executing program 9 (id=3908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 42.086730077s ago: executing program 9 (id=3909): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x1, 0x10, 0x4, 0x5, 0x8000, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x3, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x4000, 0x7, 0x485, 0x7, 0xfffffffd, 0x101, 0x10000001, 0x0, 0x3, 0x5, 0x6, 0xffffffff, 0xfffffff8]}) 41.951091287s ago: executing program 9 (id=3910): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b}}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r1, 0x89) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 41.679666876s ago: executing program 9 (id=3911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008002}, 0xc0) 41.589585697s ago: executing program 9 (id=3912): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r5, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r6, 0x0) 41.375462078s ago: executing program 9 (id=3913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r1, 0x0, 0x0) 39.362574157s ago: executing program 40 (id=3885): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x3, 0x5}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.662928221s ago: executing program 41 (id=3894): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000740)={{0x0}, 0x0}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000240)="a17aad53f37a5c78cb4ac3917a", 0xd) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r6, 0x3ff, 0x0, 0x7}) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="8b7720ab48c52f64c8cff0731b215f910500eb9ca3d63581cc5b921cf7b67a286ec2ce539afd42e7f7575b92b71a8d515ce43adc78085672990e913247db94ff0aedaba3ba4a7a358d24946edc914b2c90621f51d0d3806af70180000075b4135d882abd4b194cf9acad2b900525d106c87f9409d2c22881e607c971c434f4c739e0879fb5cde63a66f47e6bdd017b8c61b61dc57fb52301ce5922cd4d77a78cfcd25d6d2a67ee", 0xa7}, {&(0x7f0000000340)="57506a4634777a4c7efbd2586b6f078bc5210537563c33d817a7e6b2032d16a2122f15442469a233a76cbe52f8c4643312fda68176bd7f", 0x37}], 0x2}}], 0x1, 0x4001c00) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x401, 0x76}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 37.069063293s ago: executing program 4 (id=3928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.016861307s ago: executing program 4 (id=3929): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_io_uring_setup(0x34b9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x521c, 0x1, 0x61, 0x0, 0x18) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) 36.94247968s ago: executing program 4 (id=3930): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b, 0x1d, "5c76276f6c86622447b03b0b5a0a55971abe9d615061f3caa4558e4391"}}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r1, 0x89) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 36.80966633s ago: executing program 4 (id=3931): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000ffe606000000850000006100000085000000070000009500000018ed2496cb504a962a00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r5, r6, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r7, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000002880)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) 36.56955592s ago: executing program 4 (id=3932): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r4 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r5, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r6, 0x0) 36.24024535s ago: executing program 4 (id=3933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, 0x0, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 26.257722606s ago: executing program 42 (id=3913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r1, 0x0, 0x0) 20.902702132s ago: executing program 43 (id=3933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, 0x0, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000001c0)) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.09034686s ago: executing program 2 (id=4140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) acct(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00') 4.979982202s ago: executing program 2 (id=4142): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}], 0x1, 0x40480c0) 4.674176407s ago: executing program 1 (id=4145): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff7000/0x7000)=nil, 0x7000}}) munmap(&(0x7f0000294000/0x1000)=nil, 0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.04000515s ago: executing program 2 (id=4147): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000000) 4.039709592s ago: executing program 2 (id=4148): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xf, 0x410400, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x6b, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf722}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/169, 0xa9}, 0x0) sendmsg$kcm(r9, 0x0, 0x4) 4.003179336s ago: executing program 1 (id=4149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x132, 0x3e60, 0x7, 0x6, 0xfffffffa}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 3.810026026s ago: executing program 1 (id=4151): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20140, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) capget(0x0, &(0x7f0000000740)={0x1, 0x7ff, 0xa10f, 0x8, 0x903, 0x1}) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') openat$mice(0xffffffffffffff9c, 0x0, 0x719ac1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x200000005c832, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) 3.019743093s ago: executing program 2 (id=4170): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r4, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r5, 0x0) 2.969290558s ago: executing program 1 (id=4172): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x2000040) unshare(0x22020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="8fc8c1418f1f"}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000a40)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16002182973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bbabe7c7cfe8798164fd994e5b08e0b066dfd508c94a5ab1155474b865ef076f864fe867431930a7534040dc2e6262a772589f066552a4a653579aa326913926d8ef74f1b5dc87107c4847ce2b8620fd6c1eacfc8710baa17d0c8", 0x9a}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000200)="6fe4dd9e32204ff54c172e9a440284ed55de044bd3774461", 0x18}, {&(0x7f0000000ec0)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7a35b6e2ff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f0000000000eba1ada452cfe17b0000096f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d87120000000000007077ea7362eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9623810aca432a0415ad7e85dfafe625ad68f8fd9ef5c5dd59296895d1672efa7072477de47b1aec5a72376e7b0b558765ec7435f5aa572dc93b407411a3faad6b07cf54ab3cafcec4347f48120cea1ee1bb51e5c5f429fa352fb21dc81666b3b1e48a01976654c3a54eaca18432e45e25622e1f67f81ec2ac12796efffdc3a92efb57590a8a18a3f974b4a8b90f4c63b9a74ab91d44ac075b94e90bfb43983aa2e048ce4ebee34bdb97f41f645e5f8e540e39d33fc4c6a931b38daa95ff85fb269893fadc597759cd3327532fe92ea749c90e4af3edc", 0x27b}], 0x4}, 0x200048c0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x68458be498713be9}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4004) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="02a42dbd7000fcf50bf92500000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=@newtaction={0xd4, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x3, {}, [{0xc0, 0x1, [@m_gact={0xbc, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x8f, 0x6, "7018f56bf02057b821478b1eb70896df6ad7f93d2c2de4a7c495807aed359873bcdcd06f1d7ec377f6f989073233a6cd00a81d3c8af92da51169df45af437cfe19a1abf072d998265763b2b6a9d66010b6878d593fc0b8f2e6ce8479ecc3357795cf811e1a23a685b8ab9166b1206891fcc52d3a838ecce4cf7abc9d4b68e5bd4da6537f919256afccd500"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xd4}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) r11 = socket$kcm(0x2, 0x914a0a0533fbf869, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.835596137s ago: executing program 1 (id=4174): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x12, 0x1, 'veth0_macvtap\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'mqprio\x00'}, @NFTA_COMPAT_NAME={0xb, 0x1, 'mqprio\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 2.807852268s ago: executing program 2 (id=4175): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000180)) 2.805935894s ago: executing program 1 (id=4176): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000400)=[{&(0x7f00000003c0)='n', 0x1}], 0x1) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) umount2(0x0, 0xb) 2.018172194s ago: executing program 7 (id=4184): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100003040500"/20, @ANYRES32=0x0, @ANYBLOB="0105030000000000180012800900010069706970"], 0x38}, 0x1, 0xba01, 0x0, 0x50}, 0x24000890) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$packet(0x11, 0x3, 0x300) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000001c0)="6eb20c1b114f98f5", 0x8, 0xb) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) execve(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt(r4, 0x7, 0x2, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r5, 0x0) 1.712780461s ago: executing program 7 (id=4185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x301, 0x70bd25, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xffff}, {0x0, 0x8001, 0x2, 0x9}, 0xf, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0xfffffffc, 0x3c}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}]}, 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) 1.609882864s ago: executing program 5 (id=4186): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x34b9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) 1.609596258s ago: executing program 7 (id=4187): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.536943023s ago: executing program 5 (id=4188): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x6, 0x47, 0x0, {0xfffffffffffffffd, 0x50, 0xfffffffffffffffc, 0x7, 0xc, 0xffffffff, 0x7, 0x0, 0x80000, 0x6000, 0x0, 0x0, 0x0, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10006) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 620.530759ms ago: executing program 5 (id=4189): socket(0x40000000015, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 619.839429ms ago: executing program 7 (id=4190): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x19}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c00000095"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000280)={@mcast2, 0xa, r0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)=0x7ab) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000810000000800456c004000000000fb019078ac1e0001ac1414aa030190780324000047000000000100000033000100fe"], 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x81}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 519.926094ms ago: executing program 7 (id=4191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x132, 0x3e60, 0x7, 0x6, 0xfffffffa}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)}, 0x20040000) 429.530082ms ago: executing program 5 (id=4192): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900070000000500200001000000050008"], 0x7c}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x40000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x10, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20044854) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010002104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00030100000000002c0012800900010069706970000000001c000280080014"], 0x54}}, 0x884) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 349.210963ms ago: executing program 7 (id=4193): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a3100000000080041007278650014"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 89.87775ms ago: executing program 5 (id=4194): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x200, 0x5, 0x7, 0x4, 0x20, 0x7, 0xb}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 0s ago: executing program 5 (id=4195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) kernel console output (not intermixed with test programs): ilter on device netdevsim1 [ 298.295381][T15775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.313101][T15775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.314270][T15775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.328201][T15775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.342826][T15811] wlan0 speed is unknown, defaulting to 1000 [ 298.388747][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 298.831056][T15775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.878747][T15775] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.885724][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.885805][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.897090][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.897185][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.918851][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 298.947083][ T5737] Bluetooth: hci4: command tx timeout [ 299.126293][T15811] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.126367][T15811] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.126470][T15811] bridge_slave_0: entered allmulticast mode [ 299.127291][T15811] bridge_slave_0: entered promiscuous mode [ 299.156554][T15811] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.156625][T15811] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.156687][T15811] bridge_slave_1: entered allmulticast mode [ 299.157576][T15811] bridge_slave_1: entered promiscuous mode [ 299.188176][ T6346] bridge_slave_1: left allmulticast mode [ 299.188216][ T6346] bridge_slave_1: left promiscuous mode [ 299.188356][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.202531][ T6346] bridge_slave_0: left allmulticast mode [ 299.205470][ T6346] bridge_slave_0: left promiscuous mode [ 299.209115][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.425197][ T5737] Bluetooth: hci3: command tx timeout [ 299.443247][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.461662][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.468880][ T6346] bond0 (unregistering): Released all slaves [ 299.491463][T15811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.499214][T15811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.529089][T15811] team0: Port device team_slave_0 added [ 299.532578][T15811] team0: Port device team_slave_1 added [ 299.583493][T15811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.583541][T15811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.583742][T15811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.584630][T15811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.584638][T15811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.584652][T15811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.596950][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3283'. [ 299.596983][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 299.660784][T15811] hsr_slave_0: entered promiscuous mode [ 299.661451][T15811] hsr_slave_1: entered promiscuous mode [ 299.668221][T15811] debugfs: 'hsr0' already exists in 'hsr' [ 299.668274][T15811] Cannot create hsr debugfs directory [ 299.821470][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 299.852676][T15872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3284'. [ 299.937818][T15775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.179768][T15811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.191268][T15811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.192264][T15811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.202301][T15811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.206668][T15811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.237495][T15811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.238310][T15811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.247105][T15811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.261732][ T38] smbdirect: ib_dev[syz0] removed [ 300.289828][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 300.382392][T15775] veth0_vlan: entered promiscuous mode [ 300.392094][T15775] veth1_vlan: entered promiscuous mode [ 300.433098][ T6346] hsr_slave_0: left promiscuous mode [ 300.436807][ T6346] hsr_slave_1: left promiscuous mode [ 300.637011][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 300.656592][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 300.793744][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 300.856621][T15775] veth0_macvtap: entered promiscuous mode [ 300.873130][T15775] veth1_macvtap: entered promiscuous mode [ 300.929358][T15811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.945664][T15775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.958494][T15811] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.971522][T15775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.983663][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.983769][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.990265][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.990336][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.990365][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.990389][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.001533][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.001618][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.015229][ T5737] Bluetooth: hci4: command tx timeout [ 301.161223][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.165509][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.169072][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.175419][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.182953][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.231154][T15916] syzkaller0: entered promiscuous mode [ 301.231200][T15916] syzkaller0: entered allmulticast mode [ 301.281673][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.281713][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.337659][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 301.349265][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.349332][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.496818][ T5742] Bluetooth: hci3: command tx timeout [ 301.610211][T15939] syzkaller0: entered promiscuous mode [ 301.610297][T15939] syzkaller0: entered allmulticast mode [ 301.911335][T15811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.928058][ T6346] bridge_slave_1: left allmulticast mode [ 301.930798][ T6346] bridge_slave_1: left promiscuous mode [ 301.934098][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.940022][ T6346] bridge_slave_0: left allmulticast mode [ 301.942662][ T6346] bridge_slave_0: left promiscuous mode [ 301.946496][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.142918][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.159947][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.164445][ T6346] bond0 (unregistering): Released all slaves [ 302.189919][T15955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3290'. [ 302.190030][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3290'. [ 302.583015][T15968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3291'. [ 302.611129][T15968] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3291'. [ 302.711295][ T5447] 8021q: adding VLAN 0 to HW filter on device eth14 [ 302.722355][T15811] veth0_vlan: entered promiscuous mode [ 302.809018][T15811] veth1_vlan: entered promiscuous mode [ 302.888843][T15915] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.889155][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.889301][T15915] bridge_slave_0: entered allmulticast mode [ 302.890245][T15915] bridge_slave_0: entered promiscuous mode [ 302.895598][T15915] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.895682][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.895746][T15915] bridge_slave_1: entered allmulticast mode [ 302.896527][T15915] bridge_slave_1: entered promiscuous mode [ 302.992437][T15915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.004183][T15915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.067261][T15811] veth0_macvtap: entered promiscuous mode [ 303.095124][ T5742] Bluetooth: hci4: command tx timeout [ 303.139925][ T5447] 8021q: adding VLAN 0 to HW filter on device eth15 [ 303.186235][T15915] team0: Port device team_slave_0 added [ 303.210474][T15811] veth1_macvtap: entered promiscuous mode [ 303.224675][T15915] team0: Port device team_slave_1 added [ 303.255288][ T5742] Bluetooth: hci0: command tx timeout [ 303.267942][T15915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.268032][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.268084][T15915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.270595][T15915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.270609][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.270631][T15915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.296261][T15811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.322208][T15811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.368980][T15915] hsr_slave_0: entered promiscuous mode [ 303.370099][T15915] hsr_slave_1: entered promiscuous mode [ 303.370626][T15915] debugfs: 'hsr0' already exists in 'hsr' [ 303.370642][T15915] Cannot create hsr debugfs directory [ 303.585563][ T5742] Bluetooth: hci3: command tx timeout [ 303.611457][ T6346] hsr_slave_0: left promiscuous mode [ 303.613402][ T6346] hsr_slave_1: left promiscuous mode [ 303.614440][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.619928][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.805350][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 303.812773][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 303.963236][T15999] syzkaller0: entered promiscuous mode [ 303.963292][T15999] syzkaller0: entered allmulticast mode [ 303.967597][ T5447] 8021q: adding VLAN 0 to HW filter on device eth16 [ 304.067629][ T5814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.067739][ T5814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.067781][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.067815][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.070077][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.070091][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.138484][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.138560][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.459151][ T43] audit: type=1326 audit(1787985473.722:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.6.3280" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 304.477298][T15915] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 304.496263][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.496910][T15915] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 304.500333][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.501415][ T5447] 8021q: adding VLAN 0 to HW filter on device eth17 [ 304.501940][T15915] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 304.509075][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.511261][T15915] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.518687][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.541665][T16017] syzkaller0: entered promiscuous mode [ 304.543798][T16017] syzkaller0: entered allmulticast mode [ 304.691793][T15915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.711112][T15915] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.726755][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.726836][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.732778][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.732825][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.761903][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3297'. [ 304.791674][T16031] tipc: Enabling of bearer rejected, failed to enable media [ 304.868307][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3298'. [ 305.250301][T15915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.336439][ T5742] Bluetooth: hci0: command tx timeout [ 305.437719][T16053] syzkaller0: entered promiscuous mode [ 305.437766][T16053] syzkaller0: entered allmulticast mode [ 305.616617][T15915] veth0_vlan: entered promiscuous mode [ 305.624618][T15915] veth1_vlan: entered promiscuous mode [ 305.651347][T15915] veth0_macvtap: entered promiscuous mode [ 305.656749][T15915] veth1_macvtap: entered promiscuous mode [ 305.665823][ T5742] Bluetooth: hci3: command tx timeout [ 305.673468][T15915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.685604][T15915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.691891][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.692019][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.692096][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.692162][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.779651][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.781021][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.824442][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.824508][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.817441][T16077] syzkaller0: entered promiscuous mode [ 306.817514][T16077] syzkaller0: entered allmulticast mode [ 306.863336][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3305'. [ 306.863403][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 306.968411][T16082] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.293323][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3314'. [ 307.298938][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3314'. [ 307.425188][ T5742] Bluetooth: hci0: command tx timeout [ 307.462565][ T43] audit: type=1326 audit(1787985476.722:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.6.3316" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 309.045320][ T9790] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 309.294367][ T9790] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 309.329281][ T9790] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 309.329903][ T9790] usb 11-1: config 1 has no interface number 0 [ 309.340392][ T9790] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.340618][ T9790] usb 11-1: Product: syz [ 309.340632][ T9790] usb 11-1: Manufacturer: syz [ 309.340784][ T9790] usb 11-1: SerialNumber: syz [ 309.495480][ T5742] Bluetooth: hci0: command tx timeout [ 309.562396][ T9790] usb 11-1: 3:1 : does not exist [ 309.562596][ T9790] usb 11-1: 3:2 : does not exist [ 310.254583][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3323'. [ 310.259241][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3323'. [ 311.658323][ T9789] usb 11-1: USB disconnect, device number 2 [ 311.679996][T16162] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.856537][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3329'. [ 312.185255][ T9789] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 312.338947][ T9789] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 312.340834][ T9789] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 312.340852][ T9789] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.340863][ T9789] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 312.340875][ T9789] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 312.342528][ T9789] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.342542][ T9789] usb 11-1: Product: syz [ 312.342550][ T9789] usb 11-1: Manufacturer: syz [ 312.342558][ T9789] usb 11-1: SerialNumber: syz [ 312.349746][T16185] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3332'. [ 312.349772][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3332'. [ 312.350439][ T9789] usb 11-1: config 0 descriptor?? [ 312.580270][ T9789] adutux 11-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 312.604280][ T9789] usb 11-1: USB disconnect, device number 3 [ 313.199931][T16205] syzkaller0: entered promiscuous mode [ 313.203222][T16205] syzkaller0: entered allmulticast mode [ 313.600540][T16212] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3337'. [ 314.205239][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3341'. [ 314.205332][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3341'. [ 314.338332][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3342'. [ 314.635439][ T9824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 314.806296][ T9824] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 314.812142][ T9824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 314.818954][ T9824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.823239][ T9824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 314.828687][ T9824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 314.839353][ T9824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.843273][ T9824] usb 5-1: Product: syz [ 314.846209][ T9824] usb 5-1: Manufacturer: syz [ 314.848800][ T9824] usb 5-1: SerialNumber: syz [ 314.873888][ T9824] usb 5-1: config 0 descriptor?? [ 315.103622][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 315.108749][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 315.112673][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 315.116454][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 315.120245][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 315.133360][ T9824] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 315.151475][ T9824] usb 5-1: USB disconnect, device number 2 [ 315.163414][T16248] syzkaller0: entered promiscuous mode [ 315.163472][T16248] syzkaller0: entered allmulticast mode [ 315.502717][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.792259][T16271] syzkaller0: entered promiscuous mode [ 315.795546][T16271] syzkaller0: entered allmulticast mode [ 316.415110][ T9825] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 316.597236][ T9825] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.602954][ T9825] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.607681][ T9825] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 316.611874][ T9825] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 316.616105][ T9825] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.639046][ T9825] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.779154][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.779264][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.928148][ T9825] snd-usb-audio 11-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 316.933761][ T9825] usb 11-1: USB disconnect, device number 4 [ 317.285244][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 317.416377][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.456061][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 317.461921][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 317.465257][T16303] netlink: 'syz.6.3363': attribute type 2 has an invalid length. [ 317.470475][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.475107][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 317.479915][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 317.486369][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.489493][ T9] usb 5-1: Product: syz [ 317.491413][ T9] usb 5-1: Manufacturer: syz [ 317.493472][ T9] usb 5-1: SerialNumber: syz [ 317.498387][ T9] usb 5-1: config 0 descriptor?? [ 317.709228][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 317.713080][ T9] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 317.725224][ T9] usb 5-1: USB disconnect, device number 3 [ 318.398333][T16309] syzkaller0: entered promiscuous mode [ 318.398407][T16309] syzkaller0: entered allmulticast mode [ 318.571385][T16311] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3366'. [ 318.571498][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3366'. [ 318.658997][T16313] syzkaller0: entered promiscuous mode [ 318.659080][T16313] syzkaller0: entered allmulticast mode [ 320.448929][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.459155][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.463455][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.467577][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.470846][ T43] audit: type=1326 audit(1787985489.732:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16331 comm="syz.0.3375" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 320.471842][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.677757][T16341] syzkaller0: entered promiscuous mode [ 320.677828][T16341] syzkaller0: entered allmulticast mode [ 320.916927][ T6346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.089885][ T6346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.106675][T16329] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.106812][T16329] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.106952][T16329] bridge_slave_0: entered allmulticast mode [ 321.108354][T16329] bridge_slave_0: entered promiscuous mode [ 321.121307][T16329] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.121765][T16329] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.121890][T16329] bridge_slave_1: entered allmulticast mode [ 321.123408][T16329] bridge_slave_1: entered promiscuous mode [ 321.168046][T16329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.174321][T16329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.232372][ T6346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.251602][T16358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3379'. [ 321.267317][T16329] team0: Port device team_slave_0 added [ 321.271745][T16329] team0: Port device team_slave_1 added [ 321.288760][T16358] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3379'. [ 321.343727][ T6346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.383337][T16329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.383390][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.383446][T16329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.384654][T16329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.384665][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.384679][T16329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.463427][T16329] hsr_slave_0: entered promiscuous mode [ 321.464305][T16329] hsr_slave_1: entered promiscuous mode [ 321.467696][T16329] debugfs: 'hsr0' already exists in 'hsr' [ 321.467717][T16329] Cannot create hsr debugfs directory [ 321.734929][ T6346] bridge_slave_1: left allmulticast mode [ 321.735363][ T6346] bridge_slave_1: left promiscuous mode [ 321.735674][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.740176][ T6346] bridge_slave_0: left allmulticast mode [ 321.740190][ T6346] bridge_slave_0: left promiscuous mode [ 321.740288][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.972310][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.989142][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.994680][ T6346] bond0 (unregistering): Released all slaves [ 322.341457][T16329] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 322.350356][T16329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.423692][T16329] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 322.428381][T16329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.428873][T16329] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 322.432696][T16329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.433449][T16329] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 322.462719][T16329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.539379][ T5742] Bluetooth: hci1: command tx timeout [ 322.600415][ T5447] 8021q: adding VLAN 0 to HW filter on device eth18 [ 324.318370][ T6346] hsr_slave_0: left promiscuous mode [ 324.320687][ T6346] hsr_slave_1: left promiscuous mode [ 324.322063][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.322081][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.328070][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.328115][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.339018][ T6346] veth1_macvtap: left promiscuous mode [ 324.339124][ T6346] veth0_macvtap: left promiscuous mode [ 324.339228][ T6346] veth1_vlan: left promiscuous mode [ 324.339259][ T6346] veth0_vlan: left promiscuous mode [ 324.612502][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 324.615097][ T5742] Bluetooth: hci1: command tx timeout [ 324.619973][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 325.011953][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.056877][T16329] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.066703][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.066845][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.072702][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.072794][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.155707][ T5447] 8021q: adding VLAN 0 to HW filter on device eth19 [ 325.464311][ T5447] 8021q: adding VLAN 0 to HW filter on device eth20 [ 325.615722][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3385'. [ 325.615805][T16407] bond0: Unable to set down delay as MII monitoring is disabled [ 325.626279][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3385'. [ 325.643972][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3386'. [ 325.644048][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 325.678464][T16329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.803992][ T5447] 8021q: adding VLAN 0 to HW filter on device eth21 [ 325.940078][T16329] veth0_vlan: entered promiscuous mode [ 325.952325][T16329] veth1_vlan: entered promiscuous mode [ 325.994144][T16329] veth0_macvtap: entered promiscuous mode [ 326.006597][T16329] veth1_macvtap: entered promiscuous mode [ 326.057975][T16329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.066401][T16329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.110303][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.110385][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.110432][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.110454][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.175633][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.175689][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.230745][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.230817][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.695329][ T5742] Bluetooth: hci1: command tx timeout [ 326.708253][T16448] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3393'. [ 326.709247][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3393'. [ 326.813530][T16454] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3396'. [ 326.817162][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3396'. [ 327.001160][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3399'. [ 327.080042][T16465] random: crng reseeded on system resumption [ 327.426643][T16475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 328.071007][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3405'. [ 328.785510][ T5742] Bluetooth: hci1: command tx timeout [ 329.684506][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.690620][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.694059][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.699088][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.704532][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.095763][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.218767][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.310341][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.403664][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.625668][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.625750][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.625835][T16500] bridge_slave_0: entered allmulticast mode [ 330.630727][T16500] bridge_slave_0: entered promiscuous mode [ 330.651070][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.651157][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.651268][T16500] bridge_slave_1: entered allmulticast mode [ 330.652732][T16500] bridge_slave_1: entered promiscuous mode [ 330.707771][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.737263][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.767939][T16500] team0: Port device team_slave_0 added [ 330.778284][ T12] bridge_slave_1: left allmulticast mode [ 330.778341][ T12] bridge_slave_1: left promiscuous mode [ 330.778561][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.793940][ T12] bridge_slave_0: left allmulticast mode [ 330.794013][ T12] bridge_slave_0: left promiscuous mode [ 330.794197][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.022445][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.035055][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.040031][ T12] bond0 (unregistering): Released all slaves [ 331.055651][T16500] team0: Port device team_slave_1 added [ 331.111337][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.111387][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.111579][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.112819][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.112828][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.112841][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.181052][T16500] hsr_slave_0: entered promiscuous mode [ 331.181726][T16500] hsr_slave_1: entered promiscuous mode [ 331.182162][T16500] debugfs: 'hsr0' already exists in 'hsr' [ 331.182177][T16500] Cannot create hsr debugfs directory [ 331.380023][T16538] syzkaller0: entered promiscuous mode [ 331.380086][T16538] syzkaller0: entered allmulticast mode [ 331.749940][ T5737] Bluetooth: hci4: command tx timeout [ 332.786079][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.225800][ T5447] 8021q: adding VLAN 0 to HW filter on device eth22 [ 333.358059][ T12] hsr_slave_0: left promiscuous mode [ 333.360391][ T12] hsr_slave_1: left promiscuous mode [ 333.362039][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.362061][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.376412][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.376493][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.384838][T16552] __nla_validate_parse: 1 callbacks suppressed [ 333.384922][T16552] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.3423'. [ 333.401937][ T12] veth1_macvtap: left promiscuous mode [ 333.402065][ T12] veth0_macvtap: left promiscuous mode [ 333.402227][ T12] veth1_vlan: left promiscuous mode [ 333.402349][ T12] veth0_vlan: left promiscuous mode [ 333.815238][ T5737] Bluetooth: hci4: command tx timeout [ 333.860079][ T12] team0 (unregistering): Port device team_slave_1 removed [ 333.875781][ T12] team0 (unregistering): Port device team_slave_0 removed [ 334.528757][ T5447] 8021q: adding VLAN 0 to HW filter on device eth23 [ 334.573377][T16500] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 334.593008][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.603692][T16500] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 334.622475][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.622991][T16500] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 334.640563][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.641062][T16500] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 334.650919][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.812551][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.846114][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.856977][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.857204][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.883118][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.883291][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.101383][ T5447] 8021q: adding VLAN 0 to HW filter on device eth24 [ 335.897119][ T5737] Bluetooth: hci4: command tx timeout [ 336.932377][T16602] syzkaller0: entered promiscuous mode [ 336.932465][T16602] syzkaller0: entered allmulticast mode [ 337.272102][ T5447] 8021q: adding VLAN 0 to HW filter on device eth25 [ 337.273735][T16626] syzkaller0: entered promiscuous mode [ 337.273749][T16626] syzkaller0: entered allmulticast mode [ 337.404361][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.469894][T16638] syzkaller0: entered promiscuous mode [ 337.469951][T16638] syzkaller0: entered allmulticast mode [ 337.641653][T16500] veth0_vlan: entered promiscuous mode [ 337.646735][T16500] veth1_vlan: entered promiscuous mode [ 337.673615][T16500] veth0_macvtap: entered promiscuous mode [ 337.676848][T16500] veth1_macvtap: entered promiscuous mode [ 337.684066][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.689565][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.694027][ T6346] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.765791][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.766867][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.766882][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.782949][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.783024][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.796933][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.797002][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.898905][T16656] syzkaller0: entered promiscuous mode [ 337.898955][T16656] syzkaller0: entered allmulticast mode [ 337.977367][ T5737] Bluetooth: hci4: command tx timeout [ 338.105259][ T9789] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 338.162018][T16669] syzkaller0: entered promiscuous mode [ 338.162108][T16669] syzkaller0: entered allmulticast mode [ 338.268151][ T9789] usb 14-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 338.269157][ T9789] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 338.269175][ T9789] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 338.269187][ T9789] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 338.269201][ T9789] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 338.270808][ T9789] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.270821][ T9789] usb 14-1: Product: syz [ 338.270828][ T9789] usb 14-1: Manufacturer: syz [ 338.270835][ T9789] usb 14-1: SerialNumber: syz [ 338.276927][ T9789] usb 14-1: config 0 descriptor?? [ 338.335740][ T9791] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 338.497317][ T9791] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 338.498338][ T9791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.991144][ T9791] usbhid 5-1:1.0: can't add hid device: -71 [ 338.991282][ T9791] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 338.994541][ T9791] usb 5-1: USB disconnect, device number 4 [ 339.193089][ T9789] adutux 14-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 339.205951][ T9789] usb 14-1: USB disconnect, device number 2 [ 339.596931][ T43] audit: type=1326 audit(1787985508.862:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.0.3454" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 339.611836][T16698] syzkaller0: entered promiscuous mode [ 339.611893][T16698] syzkaller0: entered allmulticast mode [ 339.829662][T16711] syzkaller0: entered promiscuous mode [ 339.829716][T16711] syzkaller0: entered allmulticast mode [ 340.754604][T16747] syzkaller0: entered promiscuous mode [ 340.756654][T16747] syzkaller0: entered allmulticast mode [ 342.683927][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.690531][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.702652][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.706808][T16750] syzkaller0: entered promiscuous mode [ 342.706869][T16750] syzkaller0: entered allmulticast mode [ 342.714566][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.715353][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.778264][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3470'. [ 343.044729][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.180277][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.234140][T16801] syzkaller0: entered promiscuous mode [ 343.234228][T16801] syzkaller0: entered allmulticast mode [ 343.244329][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'. [ 344.801299][ T5742] Bluetooth: hci0: command tx timeout [ 345.070539][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.100195][T16818] syzkaller0: entered promiscuous mode [ 345.100270][T16818] syzkaller0: entered allmulticast mode [ 345.239276][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 345.375191][ T9789] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 345.584849][ T9789] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.589703][ T9789] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 345.589801][ T9789] usb 11-1: can't read configurations, error -71 [ 346.173203][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3489'. [ 346.855087][ T5742] Bluetooth: hci0: command tx timeout [ 346.930337][T16864] syzkaller0: entered promiscuous mode [ 346.932788][T16864] syzkaller0: entered allmulticast mode [ 346.974352][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.188863][ T5742] Bluetooth: hci4: unexpected subevent 0x0c length: 30 > 5 [ 348.581739][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3503'. [ 348.945255][ T5742] Bluetooth: hci0: command tx timeout [ 349.792430][ T12] bridge_slave_1: left allmulticast mode [ 349.792488][ T12] bridge_slave_1: left promiscuous mode [ 349.793190][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.801932][ T12] bridge_slave_0: left allmulticast mode [ 349.802004][ T12] bridge_slave_0: left promiscuous mode [ 349.802231][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.172046][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.196101][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.202293][ T12] bond0 (unregistering): Released all slaves [ 350.526947][T16770] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.527071][T16770] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.527216][T16770] bridge_slave_0: entered allmulticast mode [ 350.531371][T16770] bridge_slave_0: entered promiscuous mode [ 350.543421][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.543527][T16770] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.543621][T16770] bridge_slave_1: entered allmulticast mode [ 350.552504][T16770] bridge_slave_1: entered promiscuous mode [ 350.618613][T16770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.624585][T16770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.738684][ T12] hsr_slave_0: left promiscuous mode [ 350.744453][ T12] hsr_slave_1: left promiscuous mode [ 350.751399][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.756418][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.763128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.767853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.797561][ T12] veth1_macvtap: left promiscuous mode [ 350.804402][ T12] veth0_macvtap: left promiscuous mode [ 350.807990][ T12] veth1_vlan: left promiscuous mode [ 350.810509][ T12] veth0_vlan: left promiscuous mode [ 351.015036][ T5742] Bluetooth: hci0: command tx timeout [ 351.102189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 351.117797][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.312478][T16770] team0: Port device team_slave_0 added [ 351.314340][T16770] team0: Port device team_slave_1 added [ 351.334842][T16973] syzkaller0: entered promiscuous mode [ 351.335084][T16973] syzkaller0: entered allmulticast mode [ 353.249739][T16770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.249787][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.249820][T16770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.251301][T16770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.251315][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.251336][T16770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.397073][T16770] hsr_slave_0: entered promiscuous mode [ 353.398010][T16770] hsr_slave_1: entered promiscuous mode [ 353.398506][T16770] debugfs: 'hsr0' already exists in 'hsr' [ 353.398526][T16770] Cannot create hsr debugfs directory [ 353.594813][T17002] Need at least one configuration in g_uac2. [ 353.598278][T17002] udc usbip-vudc.0: failed to start g_uac2: -22 [ 353.600425][T17002] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 353.609773][T17002] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 353.689246][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3522'. [ 353.964823][ T43] audit: type=1326 audit(1787985523.222:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17017 comm="syz.0.3526" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 353.986709][ T5447] 8021q: adding VLAN 0 to HW filter on device eth26 [ 354.263360][T17032] syzkaller0: entered promiscuous mode [ 354.263396][T17032] syzkaller0: entered allmulticast mode [ 354.301428][ T5447] 8021q: adding VLAN 0 to HW filter on device eth27 [ 354.330784][T17034] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3529'. [ 354.330856][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3529'. [ 354.477450][T16770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.489327][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.492130][T16770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.501395][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.502443][T16770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.518872][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.519991][T16770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.529873][T16770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.547801][ T5447] 8021q: adding VLAN 0 to HW filter on device eth28 [ 354.711459][T16770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.761057][T16770] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.777194][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.777311][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.788138][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.789661][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.803066][ T5447] 8021q: adding VLAN 0 to HW filter on device eth29 [ 355.115227][ T7336] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 355.273078][ T7336] usb 14-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 355.276246][ T7336] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 355.276264][ T7336] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.276275][ T7336] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 355.276287][ T7336] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 355.279196][ T7336] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.279211][ T7336] usb 14-1: Product: syz [ 355.279223][ T7336] usb 14-1: Manufacturer: syz [ 355.279230][ T7336] usb 14-1: SerialNumber: syz [ 355.280432][ T7336] usb 14-1: config 0 descriptor?? [ 355.384361][T17091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3537'. [ 355.384420][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3537'. [ 355.483660][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3538'. [ 355.488002][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 355.550130][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.572149][ T7336] adutux 14-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 355.594017][ T7336] usb 14-1: USB disconnect, device number 3 [ 355.690908][T16770] veth0_vlan: entered promiscuous mode [ 355.711330][T16770] veth1_vlan: entered promiscuous mode [ 355.767567][T16770] veth0_macvtap: entered promiscuous mode [ 355.770970][T16770] veth1_macvtap: entered promiscuous mode [ 355.788219][T16770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.790869][T16770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.834276][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.834371][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.834428][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.912848][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.912913][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.915430][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.965203][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.965282][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.023076][T17113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 356.593291][ T43] audit: type=1326 audit(1787985525.852:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.3.3543" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 356.765836][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3545'. [ 356.765908][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3545'. [ 356.945183][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3546'. [ 358.092598][T17187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 358.981067][T17209] __nla_validate_parse: 4 callbacks suppressed [ 358.981385][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3560'. [ 359.267595][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3564'. [ 359.271025][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 359.359095][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3565'. [ 359.359164][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3565'. [ 359.502784][T17234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 360.165287][ T7336] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 360.243464][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3573'. [ 360.243541][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 360.315620][ T7336] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 360.319018][ T7336] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 360.319044][ T7336] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.319056][ T7336] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 360.319069][ T7336] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 360.321655][ T7336] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.321675][ T7336] usb 11-1: Product: syz [ 360.321686][ T7336] usb 11-1: Manufacturer: syz [ 360.321697][ T7336] usb 11-1: SerialNumber: syz [ 360.327313][ T7336] usb 11-1: config 0 descriptor?? [ 360.335929][T17255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3574'. [ 360.335954][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 360.591460][ T7336] adutux 11-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 360.597633][ T7336] usb 11-1: USB disconnect, device number 7 [ 360.807736][T17261] syzkaller0: entered promiscuous mode [ 360.807819][T17261] syzkaller0: entered allmulticast mode [ 361.344979][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 361.351710][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.785328][ T9824] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 362.941469][ T9824] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 362.952347][ T9824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 362.952468][ T9824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.952536][ T9824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 362.952572][ T9824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 362.972982][ T9824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.973004][ T9824] usb 8-1: Product: syz [ 362.973014][ T9824] usb 8-1: Manufacturer: syz [ 362.973024][ T9824] usb 8-1: SerialNumber: syz [ 362.985824][ T9824] usb 8-1: config 0 descriptor?? [ 363.216949][ T9824] adutux 8-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 363.231935][ T9824] usb 8-1: USB disconnect, device number 2 [ 364.244843][T17364] __nla_validate_parse: 11 callbacks suppressed [ 364.245939][T17364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3612'. [ 364.245987][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 364.540608][T17378] Process accounting resumed [ 364.805075][ T2349] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 364.955793][ T2349] usb 14-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 364.959672][ T2349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 364.959691][ T2349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.959703][ T2349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 364.959716][ T2349] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 364.961251][ T2349] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.961264][ T2349] usb 14-1: Product: syz [ 364.961272][ T2349] usb 14-1: Manufacturer: syz [ 364.961279][ T2349] usb 14-1: SerialNumber: syz [ 364.962645][ T2349] usb 14-1: config 0 descriptor?? [ 365.179307][ T2349] adutux 14-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 365.188118][ T2349] usb 14-1: USB disconnect, device number 4 [ 365.286945][T17397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3624'. [ 365.291079][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 366.725523][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3639'. [ 367.019206][T17447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3642'. [ 367.042344][T17452] syzkaller0: entered promiscuous mode [ 367.042402][T17452] syzkaller0: entered allmulticast mode [ 367.067173][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 367.067259][T17447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3642'. [ 367.106153][T17455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18 [ 367.335677][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.450384][T17475] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3654'. [ 367.499016][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3654'. [ 367.647807][T17481] syzkaller0: entered promiscuous mode [ 367.647869][T17481] syzkaller0: entered allmulticast mode [ 367.959933][T17493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 368.436169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.784379][T17524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20 [ 369.401508][T17551] __nla_validate_parse: 16 callbacks suppressed [ 369.404542][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 369.408467][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 369.412851][T17551] netlink: 'syz.3.3680': attribute type 6 has an invalid length. [ 369.476779][T17549] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.505406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.597088][T17549] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.608036][T17553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3681'. [ 369.619402][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3682'. [ 369.619472][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 369.658501][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 369.658559][T17553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3681'. [ 369.659321][T17549] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.684486][T17564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 369.761896][T17549] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.894240][T17574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3686'. [ 369.915264][ T5789] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.915713][ T5789] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.915732][ T5789] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.915749][ T5789] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.955349][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 369.955417][T17576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3686'. [ 370.535550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.627383][T17768] __nla_validate_parse: 25 callbacks suppressed [ 374.630711][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3748'. [ 374.635215][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3748'. [ 375.536256][T17777] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3751'. [ 375.585818][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3751'. [ 375.585892][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3751'. [ 375.853539][T17780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3752'. [ 375.873943][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3752'. [ 375.877209][T17780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3752'. [ 376.892259][T17810] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3762'. [ 376.949656][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3762'. [ 378.217027][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.217168][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.318502][T17864] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 379.635224][ T5954] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 379.660591][T17885] __nla_validate_parse: 1 callbacks suppressed [ 379.660664][T17885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3792'. [ 379.660701][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'. [ 379.796030][ T5954] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 379.797023][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 379.797039][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 379.797057][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 379.797069][ T5954] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 379.798860][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.798872][ T5954] usb 8-1: Product: syz [ 379.798879][ T5954] usb 8-1: Manufacturer: syz [ 379.798886][ T5954] usb 8-1: SerialNumber: syz [ 379.801231][ T5954] usb 8-1: config 0 descriptor?? [ 380.017350][ T5954] adutux 8-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 380.019470][ T5954] usb 8-1: USB disconnect, device number 3 [ 380.033388][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3795'. [ 380.033457][T17901] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3795'. [ 381.748489][T17896] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3795'. [ 381.853263][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.853833][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.961927][T17913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.973670][T17913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.197123][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.197239][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.197259][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.197278][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.675662][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3805'. [ 383.195949][T17946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3809'. [ 383.239447][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 383.242673][T17946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3809'. [ 383.296319][T17949] syzkaller0: entered promiscuous mode [ 383.298639][T17949] syzkaller0: entered allmulticast mode [ 383.757434][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 384.035913][T17969] syzkaller0: entered promiscuous mode [ 384.035953][T17969] syzkaller0: entered allmulticast mode [ 384.256419][ T43] audit: type=1326 audit(1787985553.522:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.3.3820" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 384.411822][T17982] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.412135][T17982] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.472679][T17982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.481449][T17982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.597543][ T5789] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.597618][ T5789] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.597685][ T5789] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.597735][ T5789] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.680967][T17991] __nla_validate_parse: 3 callbacks suppressed [ 384.681035][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3827'. [ 384.719179][T17993] syzkaller0: entered promiscuous mode [ 384.719242][T17993] syzkaller0: entered allmulticast mode [ 385.301604][T18018] syzkaller0: entered promiscuous mode [ 385.301691][T18018] syzkaller0: entered allmulticast mode [ 385.302970][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'. [ 385.420023][ T5742] Bluetooth: hci2: command 0x0406 tx timeout [ 385.554544][ T43] audit: type=1326 audit(1787985554.812:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18031 comm="syz.0.3845" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 385.821587][T18039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.826570][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3848'. [ 386.479574][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3854'. [ 388.319050][T18075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.323363][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 388.438266][ T43] audit: type=1326 audit(1787985557.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18082 comm="syz.9.3861" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 388.788110][T18096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3865'. [ 388.788190][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 389.701425][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3867'. [ 390.933943][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 391.076588][T18113] tipc: Started in network mode [ 391.076673][T18113] tipc: Node identity ac14142f, cluster identity 4711 [ 391.081897][T18113] tipc: New replicast peer: 255.255.255.255 [ 391.085710][T18113] tipc: Enabled bearer , priority 10 [ 391.086854][T18113] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3871'. [ 391.711678][T18125] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.711974][T18125] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.832019][T18125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.835860][T18125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.015487][ T5789] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.015584][ T5789] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.015615][ T5789] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.015642][ T5789] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.096818][ T2349] tipc: Node number set to 2886997039 [ 392.377247][T18136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3878'. [ 392.380343][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3878'. [ 392.783826][T18144] capability: warning: `syz.0.3882' uses 32-bit capabilities (legacy support in use) [ 392.876014][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 393.472721][T18155] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3887'. [ 393.478880][T18155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.487719][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3887'. [ 394.704443][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3893'. [ 394.957524][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3896'. [ 395.027109][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3896'. [ 400.829570][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 400.838999][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 400.845668][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.852787][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.857757][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.108322][ T5789] bridge_slave_1: left allmulticast mode [ 402.108393][ T5789] bridge_slave_1: left promiscuous mode [ 402.108595][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.124415][ T5789] bridge_slave_0: left allmulticast mode [ 402.124490][ T5789] bridge_slave_0: left promiscuous mode [ 402.124695][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.443574][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.450950][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.462044][ T5789] bond0 (unregistering): Released all slaves [ 402.782476][T18191] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.784879][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.788511][T18191] bridge_slave_0: entered allmulticast mode [ 402.791732][T18191] bridge_slave_0: entered promiscuous mode [ 402.831870][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 402.832751][T18191] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.832796][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.832867][T18191] bridge_slave_1: entered allmulticast mode [ 402.833637][T18191] bridge_slave_1: entered promiscuous mode [ 402.834201][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3903'. [ 402.878602][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.904069][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.935119][ T5737] Bluetooth: hci0: command tx timeout [ 402.974342][T18191] team0: Port device team_slave_0 added [ 402.985333][T18191] team0: Port device team_slave_1 added [ 403.128229][T18191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.131200][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.141716][T18191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.167656][T18191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.167700][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.167735][T18191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.367523][T18191] hsr_slave_0: entered promiscuous mode [ 403.378991][T18191] hsr_slave_1: entered promiscuous mode [ 403.387981][T18191] debugfs: 'hsr0' already exists in 'hsr' [ 403.388028][T18191] Cannot create hsr debugfs directory [ 403.388949][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 403.528663][ T5789] hsr_slave_0: left promiscuous mode [ 403.531735][ T5789] hsr_slave_1: left promiscuous mode [ 403.532243][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.536931][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.770915][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 403.791349][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 403.898361][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 404.327004][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 404.353353][T18246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 404.853445][T18191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.858703][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.859465][T18191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.872938][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.873625][T18191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.880517][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.881214][T18191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.888337][T18191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.941542][T18191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.956099][T18191] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.965713][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.965808][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.974026][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.974174][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.015209][ T5737] Bluetooth: hci0: command tx timeout [ 405.324247][T18191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.566461][T18312] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 405.590433][T18191] veth0_vlan: entered promiscuous mode [ 405.609222][T18191] veth1_vlan: entered promiscuous mode [ 405.648251][T18191] veth0_macvtap: entered promiscuous mode [ 405.653729][T18191] veth1_macvtap: entered promiscuous mode [ 405.674581][T18191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.684444][T18191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.719003][ T5789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.719191][ T5789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.719219][ T5789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.719248][ T5789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.832711][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.832796][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.857910][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.857949][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.036617][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3912'. [ 407.095159][ T5737] Bluetooth: hci0: command tx timeout [ 408.399835][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.401157][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.401919][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.405942][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.406738][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.175124][ T5737] Bluetooth: hci0: command tx timeout [ 409.248395][T18382] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.248470][T18382] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.248601][T18382] bridge_slave_0: entered allmulticast mode [ 409.257966][T18382] bridge_slave_0: entered promiscuous mode [ 409.259679][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'. [ 409.267295][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.269879][T18382] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.270017][T18382] bridge_slave_1: entered allmulticast mode [ 409.271405][T18382] bridge_slave_1: entered promiscuous mode [ 409.348592][T18382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.353316][T18382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.426592][T18382] team0: Port device team_slave_0 added [ 409.448769][T18382] team0: Port device team_slave_1 added [ 409.512767][ T6346] bridge_slave_1: left allmulticast mode [ 409.512806][ T6346] bridge_slave_1: left promiscuous mode [ 409.512949][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.525568][ T6346] bridge_slave_0: left allmulticast mode [ 409.525624][ T6346] bridge_slave_0: left promiscuous mode [ 409.525752][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.708333][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.717977][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.724457][ T6346] bond0 (unregistering): Released all slaves [ 409.738668][T18382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.738708][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.738766][T18382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.741004][T18382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.741013][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.741026][T18382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.788642][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 409.904524][T18382] hsr_slave_0: entered promiscuous mode [ 409.908153][T18382] hsr_slave_1: entered promiscuous mode [ 409.908539][T18382] debugfs: 'hsr0' already exists in 'hsr' [ 409.908579][T18382] Cannot create hsr debugfs directory [ 410.074848][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.084094][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.094645][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.102144][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.105198][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.413227][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 410.546149][ T5737] Bluetooth: hci1: command tx timeout [ 410.746546][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 411.028710][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'. [ 411.042692][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 411.271899][T18419] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.272204][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.272823][T18419] bridge_slave_0: entered allmulticast mode [ 411.285116][T18419] bridge_slave_0: entered promiscuous mode [ 411.350723][T18419] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.350792][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.350912][T18419] bridge_slave_1: entered allmulticast mode [ 411.351747][T18419] bridge_slave_1: entered promiscuous mode [ 411.451900][T18419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.500220][T18419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.573160][T18419] team0: Port device team_slave_0 added [ 411.589665][T18419] team0: Port device team_slave_1 added [ 411.651510][T18419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.651592][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.651640][T18419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.675909][T18419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.675983][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.676029][T18419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.739564][T18382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.761447][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.784403][T18419] hsr_slave_0: entered promiscuous mode [ 411.786129][T18419] hsr_slave_1: entered promiscuous mode [ 411.786584][T18419] debugfs: 'hsr0' already exists in 'hsr' [ 411.786598][T18419] Cannot create hsr debugfs directory [ 411.786772][T18382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.790777][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.819995][T18382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.828033][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.847898][T18382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.852646][T18382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.135156][ T5737] Bluetooth: hci2: command tx timeout [ 412.367068][T18382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.379005][T18382] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.469691][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.469795][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.491195][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.491280][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.615831][ T5737] Bluetooth: hci1: command tx timeout [ 412.629246][ T6346] hsr_slave_0: left promiscuous mode [ 412.631723][ T6346] hsr_slave_1: left promiscuous mode [ 412.632212][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.637229][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.905659][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 412.924043][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 413.468745][T18419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.486579][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.487404][T18419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.490917][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.491809][T18419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.513695][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.514704][T18419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.523612][T18419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.607690][T18382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.648833][T18382] veth0_vlan: entered promiscuous mode [ 413.662419][T18382] veth1_vlan: entered promiscuous mode [ 413.721428][T18382] veth0_macvtap: entered promiscuous mode [ 413.732225][T18382] veth1_macvtap: entered promiscuous mode [ 413.770270][T18419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.791245][T18382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.858755][T18382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.880288][T18419] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.892191][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.892300][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.901903][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.902009][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.966288][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.989873][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.049202][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.195797][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.201676][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.201768][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.215540][ T5737] Bluetooth: hci2: command tx timeout [ 414.312258][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.312325][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.326016][ T6346] bridge_slave_1: left allmulticast mode [ 414.326068][ T6346] bridge_slave_1: left promiscuous mode [ 414.326211][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.332278][ T6346] bridge_slave_0: left allmulticast mode [ 414.332296][ T6346] bridge_slave_0: left promiscuous mode [ 414.332420][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.558559][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.563420][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.570339][ T6346] bond0 (unregistering): Released all slaves [ 414.683789][ T6346] tipc: Disabling bearer [ 414.683905][ T6346] tipc: Left network mode [ 414.695587][ T5737] Bluetooth: hci1: command tx timeout [ 414.862349][T18419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.961209][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'. [ 415.015677][T18419] veth0_vlan: entered promiscuous mode [ 415.033907][T18419] veth1_vlan: entered promiscuous mode [ 415.084701][T18419] veth0_macvtap: entered promiscuous mode [ 415.090804][T18419] veth1_macvtap: entered promiscuous mode [ 415.140134][T18419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.147630][T18419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.305643][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.305710][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.305752][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.305770][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.461648][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.461683][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.530371][T17663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.530438][T17663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.694458][ T6346] hsr_slave_0: left promiscuous mode [ 415.715372][ T6346] hsr_slave_1: left promiscuous mode [ 415.720531][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.726021][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.897967][T18596] infiniband syz0: set active [ 415.903737][T18596] infiniband syz0: added syz_tun [ 415.916117][T18596] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 415.923217][T18596] infiniband syz0: Couldn't open port 1 [ 415.949808][T18596] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 415.949967][T18596] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 415.950010][T18596] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 416.059292][T18596] RDS/IB: syz0: added [ 416.060126][T18596] smc: adding ib device syz0 with port count 1 [ 416.060178][T18596] smc: ib device syz0 port 1 has no pnetid [ 416.065556][ T5954] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.183590][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 416.208653][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 416.235661][ T5954] usb 7-1: Using ep0 maxpacket: 8 [ 416.236275][ T5954] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 416.237285][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.237311][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.253239][ T5954] usb 7-1: config 0 descriptor?? [ 416.305182][ T5737] Bluetooth: hci2: command tx timeout [ 416.481760][ T5954] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 416.775124][ T5737] Bluetooth: hci1: command tx timeout [ 417.014738][ T5885] usb 7-1: USB disconnect, device number 3 [ 417.337277][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 417.522467][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 417.669048][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'. [ 417.687063][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 417.869819][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 418.000609][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3940'. [ 418.018729][T18692] bridge0: port 3(macsec1) entered blocking state [ 418.022288][T18692] bridge0: port 3(macsec1) entered disabled state [ 418.026171][T18692] macsec1: entered allmulticast mode [ 418.026185][T18692] bridge0: entered allmulticast mode [ 418.026204][T18692] bridge0: entered promiscuous mode [ 418.028367][T18692] macsec1: left allmulticast mode [ 418.028379][T18692] bridge0: left allmulticast mode [ 418.049369][ T42] bridge0: left promiscuous mode [ 418.175690][T18697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input23 [ 418.375408][ T5737] Bluetooth: hci2: command tx timeout [ 418.640968][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3946'. [ 418.727559][T18720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3948'. [ 418.727630][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3948'. [ 419.288592][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'. [ 419.399456][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3958'. [ 419.402473][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3958'. [ 420.205599][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 421.077505][T18779] Bluetooth: MGMT ver 1.23 [ 421.460771][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.464685][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.468648][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.469718][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.470390][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.913448][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3975'. [ 422.239029][ T6346] bridge_slave_1: left allmulticast mode [ 422.239204][ T6346] bridge_slave_1: left promiscuous mode [ 422.239348][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.254013][ T6346] bridge_slave_0: left allmulticast mode [ 422.254073][ T6346] bridge_slave_0: left promiscuous mode [ 422.254220][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.471876][ T43] audit: type=1800 audit(1787985591.732:12): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3978" name="addr_trtype" dev="configfs" ino=87541 res=0 errno=0 [ 422.477928][ T43] audit: type=1800 audit(1787985591.732:13): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3978" name="addr_traddr" dev="configfs" ino=89766 res=0 errno=0 [ 422.479389][ T43] audit: type=1800 audit(1787985591.752:14): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3978" name="addr_trsvcid" dev="configfs" ino=89767 res=0 errno=0 [ 422.482651][T18826] nvmet_tcp: address family 255 not supported [ 422.551488][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.561543][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.567554][ T6346] bond0 (unregistering): Released all slaves [ 422.855229][ T853] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 422.947855][ T5447] 8021q: adding VLAN 0 to HW filter on device eth14 [ 423.008184][ T853] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 423.012261][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 423.012321][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 423.012355][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 423.012386][ T853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 423.016836][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.016858][ T853] usb 7-1: Product: syz [ 423.016867][ T853] usb 7-1: Manufacturer: syz [ 423.016877][ T853] usb 7-1: SerialNumber: syz [ 423.038791][ T853] usb 7-1: config 0 descriptor?? [ 423.131662][T18794] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.131838][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.131945][T18794] bridge_slave_0: entered allmulticast mode [ 423.135524][T18794] bridge_slave_0: entered promiscuous mode [ 423.140446][T18794] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.140590][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.140723][T18794] bridge_slave_1: entered allmulticast mode [ 423.144553][T18794] bridge_slave_1: entered promiscuous mode [ 423.239770][T18794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.258899][T18794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.269532][ T853] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 423.310830][ T853] usb 7-1: USB disconnect, device number 4 [ 423.377656][T18794] team0: Port device team_slave_0 added [ 423.381077][T18794] team0: Port device team_slave_1 added [ 423.413927][T18794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.413978][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.414016][T18794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.415185][T18794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.415194][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.415207][T18794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.451621][T18794] hsr_slave_0: entered promiscuous mode [ 423.452141][T18794] hsr_slave_1: entered promiscuous mode [ 423.505133][ T5737] Bluetooth: hci3: command tx timeout [ 423.774353][ T5447] 8021q: adding VLAN 0 to HW filter on device eth15 [ 424.072117][ T5447] 8021q: adding VLAN 0 to HW filter on device eth16 [ 424.290672][ T6346] hsr_slave_0: left promiscuous mode [ 424.293289][ T6346] hsr_slave_1: left promiscuous mode [ 424.293826][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.304671][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.431476][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 424.451554][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 424.613232][ T5447] 8021q: adding VLAN 0 to HW filter on device eth17 [ 424.614399][T18794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 424.621554][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.623424][T18794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 424.637796][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.643291][T18794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 424.679319][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.682606][T18794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.696192][T18794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.783536][T18794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.800298][T18794] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.810511][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.810597][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.822143][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.822232][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.457115][T18794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.585704][ T5737] Bluetooth: hci3: command tx timeout [ 425.727551][T18794] veth0_vlan: entered promiscuous mode [ 425.751956][T18794] veth1_vlan: entered promiscuous mode [ 425.807435][T18794] veth0_macvtap: entered promiscuous mode [ 425.814903][T18794] veth1_macvtap: entered promiscuous mode [ 425.838281][T18794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.858038][T18794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.885053][ T6346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.885109][ T6346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.885154][ T6346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.885187][ T6346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.895124][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 426.044784][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.044889][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.045940][ T35] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 426.047404][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 426.047431][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.047455][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 426.047493][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 426.052234][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.052251][ T35] usb 6-1: Product: syz [ 426.052260][ T35] usb 6-1: Manufacturer: syz [ 426.052267][ T35] usb 6-1: SerialNumber: syz [ 426.055392][ T35] usb 6-1: config 0 descriptor?? [ 426.088572][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.100684][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.272658][ T35] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 426.291462][ T35] usb 6-1: USB disconnect, device number 5 [ 426.894229][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.899721][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 426.903383][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 426.911888][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 426.917782][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.375854][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.548352][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.666887][ T5742] Bluetooth: hci3: command tx timeout [ 427.741150][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.931717][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.129395][T19016] bonding: unable to delete non-existent b [ 428.413318][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4000'. [ 428.462750][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'. [ 428.497813][ T12] bridge_slave_1: left allmulticast mode [ 428.501010][ T12] bridge_slave_1: left promiscuous mode [ 428.504434][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.512566][ T12] bridge_slave_0: left allmulticast mode [ 428.515886][ T12] bridge_slave_0: left promiscuous mode [ 428.521408][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.724040][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.739511][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.744019][ T12] bond0 (unregistering): Released all slaves [ 428.813349][T19040] syzkaller0: entered promiscuous mode [ 428.813431][T19040] syzkaller0: entered allmulticast mode [ 428.839258][ T1350] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.964724][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.969981][T18973] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.970112][T18973] bridge_slave_0: entered allmulticast mode [ 428.977123][T18973] bridge_slave_0: entered promiscuous mode [ 428.982684][T18973] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.982770][T18973] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.982872][T18973] bridge_slave_1: entered allmulticast mode [ 428.983712][T18973] bridge_slave_1: entered promiscuous mode [ 428.997670][ T1350] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 428.999645][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 428.999672][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 428.999691][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 428.999711][ T1350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 429.001877][ T1350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.001898][ T1350] usb 6-1: Product: syz [ 429.001910][ T1350] usb 6-1: Manufacturer: syz [ 429.001923][ T1350] usb 6-1: SerialNumber: syz [ 429.004038][ T1350] usb 6-1: config 0 descriptor?? [ 429.015159][ T5742] Bluetooth: hci4: command tx timeout [ 429.034693][T18973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.041075][T18973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.084281][T18973] team0: Port device team_slave_0 added [ 429.096789][T18973] team0: Port device team_slave_1 added [ 429.162807][T18973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.162912][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.163197][T18973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.166820][T18973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.166830][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.166845][T18973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.243109][ T1350] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 429.253211][ T1350] usb 6-1: USB disconnect, device number 6 [ 429.284569][T18973] hsr_slave_0: entered promiscuous mode [ 429.285171][T18973] hsr_slave_1: entered promiscuous mode [ 429.285457][T18973] debugfs: 'hsr0' already exists in 'hsr' [ 429.285469][T18973] Cannot create hsr debugfs directory [ 429.353284][ T5447] 8021q: adding VLAN 0 to HW filter on device eth18 [ 429.377890][ T12] hsr_slave_0: left promiscuous mode [ 429.380166][ T12] hsr_slave_1: left promiscuous mode [ 429.382373][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.382408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.388475][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.388490][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.399040][ T12] veth1_macvtap: left promiscuous mode [ 429.400962][ T12] veth0_macvtap: left promiscuous mode [ 429.402923][ T12] veth1_vlan: left promiscuous mode [ 429.404822][ T12] veth0_vlan: left promiscuous mode [ 429.560798][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.568961][ T12] team0 (unregistering): Port device team_slave_0 removed [ 429.745084][ T5742] Bluetooth: hci3: command tx timeout [ 429.989649][T19074] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4009'. [ 430.029444][ T5447] 8021q: adding VLAN 0 to HW filter on device eth19 [ 430.029833][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4009'. [ 430.386183][T19094] LUN: removable file: (no medium) [ 430.388605][T19094] LUN: removable file: (no medium) [ 430.405622][T18973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.424619][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.428836][T18973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.437915][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.441550][T18973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.450566][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.454197][T18973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.461605][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.558868][T19105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4012'. [ 430.672176][T18973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.715278][T18973] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.725546][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.725644][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.740587][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.740689][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.063216][T19133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4019'. [ 431.063871][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4019'. [ 431.095590][ T5742] Bluetooth: hci4: command tx timeout [ 431.185382][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 431.272391][T18973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.355963][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 431.356952][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 431.356969][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.356981][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 431.356993][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 431.358774][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.358787][ T10] usb 10-1: Product: syz [ 431.358795][ T10] usb 10-1: Manufacturer: syz [ 431.358802][ T10] usb 10-1: SerialNumber: syz [ 431.363122][ T10] usb 10-1: config 0 descriptor?? [ 431.558003][ T5447] 8021q: adding VLAN 0 to HW filter on device eth20 [ 431.574439][T18973] veth0_vlan: entered promiscuous mode [ 431.586367][T18973] veth1_vlan: entered promiscuous mode [ 431.587017][ T10] adutux 10-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 431.596805][ T10] usb 10-1: USB disconnect, device number 2 [ 431.620366][T18973] veth0_macvtap: entered promiscuous mode [ 431.626967][T18973] veth1_macvtap: entered promiscuous mode [ 431.641778][T18973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.650368][T18973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.659249][ T5814] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.659400][ T5814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.659482][ T5814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.659510][ T5814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.733679][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.733727][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.753308][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.753591][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.613699][T19190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4027'. [ 432.616972][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4027'. [ 432.895803][ T5742] Bluetooth: hci2: Malformed LE Event: 0x0d [ 432.990652][ T5447] 8021q: adding VLAN 0 to HW filter on device eth21 [ 433.115203][ T9786] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 433.175426][ T5742] Bluetooth: hci4: command tx timeout [ 433.265994][ T9786] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 433.275968][ T9786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 433.276014][ T9786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.276047][ T9786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 433.276080][ T9786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 433.295301][ T9786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.298333][ T9786] usb 10-1: Product: syz [ 433.298348][ T9786] usb 10-1: Manufacturer: syz [ 433.298359][ T9786] usb 10-1: SerialNumber: syz [ 433.304354][ T9786] usb 10-1: config 0 descriptor?? [ 433.519363][ T9786] adutux 10-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 433.527740][ T9786] usb 10-1: USB disconnect, device number 3 [ 433.795382][T19247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4039'. [ 433.803754][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4039'. [ 434.528533][T19293] process 'syz.7.4045' launched './file1' with NULL argv: empty string added [ 434.625271][T19293] trusted_key: encrypted_key: insufficient parameters specified [ 434.877596][T19305] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.878097][T19305] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.055939][T19305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.059147][T19305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.255162][ T5742] Bluetooth: hci4: command tx timeout [ 435.267239][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.267792][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.267842][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.267863][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.016124][ T9791] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 436.411418][ T9791] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 436.412165][ T9791] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 436.412195][ T9791] usb 12-1: can't read configurations, error -71 [ 436.560179][T19393] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4073'. [ 436.560929][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'. [ 436.721057][T19408] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 436.721099][T19408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.722145][T19408] vhci_hcd vhci_hcd.0: Device attached [ 436.734885][T19408] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 436.734950][T19408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.737667][T19408] vhci_hcd vhci_hcd.0: Device attached [ 436.739975][T19408] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 436.740004][T19408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 436.740101][T19408] vhci_hcd vhci_hcd.0: Device attached [ 436.740582][T19416] vhci_hcd: connection closed [ 436.747977][T19409] vhci_hcd: connection closed [ 436.750151][T19413] vhci_hcd: connection closed [ 436.754242][ T5814] vhci_hcd vhci_hcd.1: stop threads [ 436.754891][ T5814] vhci_hcd vhci_hcd.1: release socket [ 436.754922][ T5814] vhci_hcd vhci_hcd.1: disconnect device [ 436.760540][ T5814] vhci_hcd vhci_hcd.1: stop threads [ 436.760561][ T5814] vhci_hcd vhci_hcd.1: release socket [ 436.760581][ T5814] vhci_hcd vhci_hcd.1: disconnect device [ 436.762576][ T5814] vhci_hcd vhci_hcd.1: stop threads [ 436.762594][ T5814] vhci_hcd vhci_hcd.1: release socket [ 436.762613][ T5814] vhci_hcd vhci_hcd.1: disconnect device [ 436.991793][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4085'. [ 436.995207][T19427] bond0: option downdelay: invalid value (18446744073675997440) [ 436.998047][T19427] bond0: option downdelay: allowed values 0 - 2147483647 [ 437.001468][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4085'. [ 437.485096][ T9791] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 437.645908][ T9791] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 437.651459][ T9791] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 437.652690][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 437.662164][ T9791] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 437.666398][ T9791] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 437.670783][ T9791] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 437.678504][ T9791] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.683279][ T9791] usb 12-1: Product: syz [ 437.685421][ T9791] usb 12-1: Manufacturer: syz [ 437.687508][ T9791] usb 12-1: SerialNumber: syz [ 437.693850][ T9791] usb 12-1: config 0 descriptor?? [ 437.759191][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4097'. [ 437.903669][ T9791] adutux 12-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 437.916411][ T9791] usb 12-1: USB disconnect, device number 3 [ 439.204534][T19491] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4109'. [ 439.230970][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4110'. [ 439.231818][T19497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'. [ 439.231835][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4110'. [ 439.249328][T19491] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4109'. [ 439.438996][T19505] syzkaller0: entered promiscuous mode [ 439.439055][T19505] syzkaller0: entered allmulticast mode [ 439.659559][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.659649][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.784791][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4119'. [ 439.784880][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4119'. [ 439.879576][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4120'. [ 440.088973][T19518] bond0: option downdelay: invalid value (18446744073675997440) [ 440.089040][T19518] bond0: option downdelay: allowed values 0 - 2147483647 [ 441.311805][T19545] syzkaller0: entered promiscuous mode [ 441.314281][T19545] syzkaller0: entered allmulticast mode [ 441.569080][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4130'. [ 441.569136][T19554] bond0: option downdelay: invalid value (18446744073675997440) [ 441.569194][T19554] bond0: option downdelay: allowed values 0 - 2147483647 [ 441.850389][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4137'. [ 442.360114][T19575] syzkaller0: entered promiscuous mode [ 442.360185][T19575] syzkaller0: entered allmulticast mode [ 442.813830][T19587] FAULT_INJECTION: forcing a failure. [ 442.813830][T19587] name failslab, interval 1, probability 0, space 0, times 1 [ 442.813942][T19587] CPU: 3 UID: 0 PID: 19587 Comm: syz.1.4143 Not tainted syzkaller #0 PREEMPT(full) [ 442.813978][T19587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.813989][T19587] Call Trace: [ 442.813994][T19587] [ 442.814001][T19587] dump_stack_lvl+0x100/0x190 [ 442.814027][T19587] should_fail_ex.cold+0x5/0xa [ 442.814049][T19587] should_failslab+0xc2/0x120 [ 442.814069][T19587] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 442.814084][T19587] ? __alloc_skb+0x140/0x710 [ 442.814100][T19587] __alloc_skb+0x140/0x710 [ 442.814111][T19587] ? __alloc_skb+0x5b7/0x710 [ 442.814126][T19587] ? __pfx___alloc_skb+0x10/0x10 [ 442.814148][T19587] netlink_dump+0x194/0xd00 [ 442.814168][T19587] ? __pfx_netlink_dump+0x10/0x10 [ 442.814185][T19587] ? kasan_quarantine_put+0x104/0x240 [ 442.814204][T19587] ? kfree_skbmem+0x19f/0x210 [ 442.814244][T19587] netlink_recvmsg+0x7dc/0xa90 [ 442.814269][T19587] ? __pfx_netlink_recvmsg+0x10/0x10 [ 442.814295][T19587] ? aa_sock_msg_perm+0x11e/0x200 [ 442.814318][T19587] ? __pfx_netlink_recvmsg+0x10/0x10 [ 442.814342][T19587] sock_recvmsg+0x1d5/0x220 [ 442.814366][T19587] ____sys_recvmsg+0x21e/0x670 [ 442.814392][T19587] ? __pfx_____sys_recvmsg+0x10/0x10 [ 442.814420][T19587] ? __lock_acquire+0x4c5/0x1ec0 [ 442.814443][T19587] ? __futex_wait+0x256/0x300 [ 442.814462][T19587] ___sys_recvmsg+0x16a/0x1a0 [ 442.814482][T19587] ? __pfx____sys_recvmsg+0x10/0x10 [ 442.814501][T19587] ? lock_acquire+0x1d1/0x380 [ 442.814531][T19587] do_recvmmsg+0x54d/0x740 [ 442.814552][T19587] ? __pfx_do_recvmmsg+0x10/0x10 [ 442.814571][T19587] ? find_held_lock+0x2b/0x80 [ 442.814584][T19587] ? ksys_write+0x190/0x250 [ 442.814607][T19587] __sys_recvmmsg+0x21f/0x270 [ 442.814629][T19587] ? __pfx___sys_recvmmsg+0x10/0x10 [ 442.814650][T19587] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 442.814670][T19587] ? __do_fast_syscall_32+0xb3/0x8b0 [ 442.814688][T19587] ? lockdep_hardirqs_on+0x7d/0x110 [ 442.814703][T19587] __do_fast_syscall_32+0x13a/0x8b0 [ 442.814739][T19587] do_fast_syscall_32+0x32/0x70 [ 442.814758][T19587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.814775][T19587] RIP: 0023:0xf6feefec [ 442.814791][T19587] Code: Unable to access opcode bytes at 0xf6feefc2. [ 442.814799][T19587] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 442.814815][T19587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001dc0 [ 442.814824][T19587] RDX: 0000000000000001 RSI: 0000000000000020 RDI: 0000000000000000 [ 442.814831][T19587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.814839][T19587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 442.814846][T19587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.814863][T19587] [ 443.641655][T19604] syzkaller0: entered promiscuous mode [ 443.641728][T19604] syzkaller0: entered allmulticast mode [ 444.267981][T19634] __nla_validate_parse: 1 callbacks suppressed [ 444.268082][T19634] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4161'. [ 444.298198][T19636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4162'. [ 444.298322][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4162'. [ 444.412804][T19644] capability: warning: `syz.5.4166' uses deprecated v2 capabilities in a way that may be insecure [ 444.473403][T19648] syz_tun: entered allmulticast mode [ 444.520434][T19647] syz_tun: left allmulticast mode [ 444.588625][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4170'. [ 444.695125][T19659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4172'. [ 444.695174][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'. [ 444.700784][T19662] syzkaller0: entered promiscuous mode [ 444.700810][T19662] syzkaller0: entered allmulticast mode [ 445.006916][T19675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4179'. [ 445.593860][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4184'. [ 445.944724][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4185'. [ 445.952210][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4185'. [ 447.012633][T19722] bond0: option downdelay: invalid value (18446744073675997440) [ 447.012702][T19722] bond0: option downdelay: allowed values 0 - 2147483647 [ 447.089624][T19728] syzkaller0: entered promiscuous mode [ 447.089702][T19728] syzkaller0: entered allmulticast mode [ 447.639438][T19752] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 447.666862][T19752] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 447.666945][T19752] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 447.696693][T19752] udc dummy_udc.1: failed to sta ** replaying previous printk message ** [ 447.696693][T19752] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 447.696747][T19752] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 447.698536][T19752] ================================================================== [ 447.698548][T19752] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 447.698572][T19752] Write of size 8 at addr ffff88804d8c28c0 by task syz.5.4195/19752 [ 447.698581][T19752] [ 447.698588][T19752] CPU: 0 UID: 0 PID: 19752 Comm: syz.5.4195 Not tainted syzkaller #0 PREEMPT(full) [ 447.698602][T19752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.698609][T19752] Call Trace: [ 447.698614][T19752] [ 447.698619][T19752] dump_stack_lvl+0x100/0x190 [ 447.698635][T19752] print_report+0x13d/0x4b0 [ 447.698653][T19752] ? __virt_addr_valid+0x239/0x430 [ 447.698671][T19752] ? gadgetfs_bind+0x82e/0x890 [ 447.698686][T19752] kasan_report+0xdf/0x1c0 [ 447.698701][T19752] ? gadgetfs_bind+0x82e/0x890 [ 447.698719][T19752] gadgetfs_bind+0x82e/0x890 [ 447.698736][T19752] ? kernfs_create_link+0x1bd/0x240 [ 447.698755][T19752] gadget_bind_driver+0x28c/0xbf0 [ 447.698767][T19752] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 447.698784][T19752] ? __pfx_gadget_bind_driver+0x10/0x10 [ 447.698796][T19752] really_probe+0x241/0xa60 [ 447.698809][T19752] __driver_probe_device+0x210/0x460 [ 447.698822][T19752] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 447.698836][T19752] driver_probe_device+0x4a/0x140 [ 447.698849][T19752] __driver_attach+0x21f/0x5b0 [ 447.698861][T19752] ? __pfx___driver_attach+0x10/0x10 [ 447.698873][T19752] bus_for_each_dev+0x13e/0x1d0 [ 447.698890][T19752] ? __pfx_bus_for_each_dev+0x10/0x10 [ 447.698907][T19752] ? bus_add_driver+0x2b5/0x5b0 [ 447.698918][T19752] bus_add_driver+0x305/0x5b0 [ 447.698929][T19752] driver_register+0x1e2/0x360 [ 447.698943][T19752] usb_gadget_register_driver_owner+0x132/0x210 [ 447.698956][T19752] dev_config+0xdce/0x1610 [ 447.698973][T19752] ? ksys_write+0x70/0x250 [ 447.698983][T19752] ? __pfx_dev_config+0x10/0x10 [ 447.699001][T19752] vfs_write+0x2aa/0x1050 [ 447.699011][T19752] ? __pfx_dev_config+0x10/0x10 [ 447.699032][T19752] ? lock_acquire+0x1d1/0x380 [ 447.699048][T19752] ? __fget_files+0x34/0x3d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.699059][T19752] ? __pfx_vfs_write+0x10/0x10 [ 447.699068][T19752] ? find_held_lock+0x2b/0x80 [ 447.699079][T19752] ? __fget_files+0x215/0x3d0 [ 447.699091][T19752] ? __fget_files+0x21f/0x3d0 [ 447.699103][T19752] ksys_write+0x12a/0x250 [ 447.699113][T19752] ? __pfx_ksys_write+0x10/0x10 [ 447.699141][T19752] __do_fast_syscall_32+0x13a/0x8b0 [ 447.699158][T19752] do_fast_syscall_32+0x32/0x70 [ 447.699172][T19752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.699187][T19752] RIP: 0023:0xf7fa3fec [ 447.699206][T19752] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 447.699211][T19752] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 447.699224][T19752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 447.699231][T19752] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 447.699238][T19752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.699245][T19752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.699251][T19752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.699262][T19752] [ 447.699266][T19752] [ 447.699268][T19752] Allocated by task 5738: [ 447.699274][T19752] kasan_save_stack+0x30/0x50 [ 447.699286][T19752] kasan_save_track+0x14/0x30 [ 447.699296][T19752] __kasan_kmalloc+0xaa/0xb0 [ 447.699307][T19752] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 447.699324][T19752] gadgetfs_fill_super+0x1da/0x430 [ 447.699339][T19752] get_tree_single+0xe2/0x190 [ 447.699356][T19752] vfs_get_tree+0x92/0x320 [ 447.699370][T19752] path_mount+0x7d0/0x24c0 [ 447.699383][T19752] __ia32_sys_mount+0x292/0x310 [ 447.699396][T19752] __do_fast_syscall_32+0x13a/0x8b0 [ 447.699409][T19752] do_fast_syscall_32+0x32/0x70 [ 447.699423][T19752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.699436][T19752] [ 447.699438][T19752] Freed by task 19752: [ 447.699443][T19752] kasan_save_stack+0x30/0x50 [ 447.699454][T19752] kasan_save_track+0x14/0x30 [ 447.699465][T19752] kasan_save_free_info+0x3b/0x70 [ 447.699481][T19752] __kasan_slab_free+0x5f/0x80 [ 447.699493][T19752] kfree+0x22b/0x6d0 [ 447.699507][T19752] put_dev+0xb4/0xd0 [ 447.699520][T19752] gadgetfs_bind+0x6bc/0x890 [ 447.699537][T19752] gadget_bind_driver+0x28c/0xbf0 [ 447.699548][T19752] really_probe+0x241/0xa60 [ 447.699558][T19752] __driver_probe_device+0x210/0x460 [ 447.699569][T19752] driver_probe_device+0x4a/0x140 [ 447.699583][T19752] __driver_attach+0x21f/0x5b0 [ 447.699594][T19752] bus_for_each_dev+0x13e/0x1d0 [ 447.699609][T19752] bus_add_driver+0x305/0x5b0 [ 447.699618][T19752] driver_register+0x1e2/0x360 [ 447.699630][T19752] usb_gadget_register_driver_owner+0x132/0x210 [ 447.699641][T19752] dev_config+0xdce/0x1610 [ 447.699655][T19752] vfs_write+0x2aa/0x1050 [ 447.699663][T19752] ksys_write+0x12a/0x250 [ 447.699672][T19752] __do_fast_syscall_32+0x13a/0x8b0 [ 447.699685][T19752] do_fast_syscall_32+0x32/0x70 [ 447.699699][T19752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.699711][T19752] [ 447.699714][T19752] The buggy address belongs to the object at ffff88804d8c2800 [ 447.699714][T19752] which belongs to the cache kmalloc-1k of size 1024 [ 447.699722][T19752] The buggy address is located 192 bytes inside of [ 447.699722][T19752] freed 1024-byte region [ffff88804d8c2800, ffff88804d8c2c00) [ 447.699732][T19752] [ 447.699735][T19752] The buggy address belongs to the physical page: [ 447.699740][T19752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d8c4000 pfn:0x4d8c0 [ 447.699750][T19752] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 447.699759][T19752] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 447.699770][T19752] page_type: f5(slab) [ 447.699780][T19752] raw: 04fff00000000240 ffff88801c042dc0 ffffea0001ab4e10 ffffea0001abb010 [ 447.699789][T19752] raw: ffff88804d8c4000 0000000000100008 00000000f5000000 0000000000000000 [ 447.699799][T19752] head: 04fff00000000240 ffff88801c042dc0 ffffea0001ab4e10 ffffea0001abb010 [ 447.699808][T19752] head: ffff88804d8c4000 0000000000100008 00000000f5000000 0000000000000000 [ 447.699818][T19752] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 447.699827][T19752] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 447.699833][T19752] page dumped because: kasan: bad access detected [ 447.699838][T19752] page_owner tracks the page as allocated [ 447.699841][T19752] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5734, tgid 5734 (syz-executor), ts 52708620468 [ 447.699859][T19752] post_alloc_hook+0xfd/0x120 [ 447.699875][T19752] get_page_from_freelist+0x110d/0x35b0 [ 447.699892][T19752] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 447.699908][T19752] new_slab+0xa9/0x6e0 [ 447.699923][T19752] refill_objects+0xe3/0x410 [ 447.699939][T19752] __pcs_replace_empty_main+0x35e/0x650 [ 447.699954][T19752] __kmalloc_node_noprof+0x6ad/0x880 [ 447.699964][T19752] qdisc_alloc+0xbb/0xb30 [ 447.699978][T19752] qdisc_create_dflt+0x93/0x490 [ 447.699995][T19752] dev_activate+0x64f/0xce0 [ 447.700008][T19752] __dev_open+0x490/0x8f0 [ 447.700022][T19752] __dev_change_flags+0x596/0x850 [ 447.700036][T19752] netif_change_flags+0x8d/0x160 [ 447.700046][T19752] do_setlink.isra.0+0x1ac4/0x3e60 [ 447.700060][T19752] rtnl_newlink+0x13c1/0x2620 [ 447.700072][T19752] rtnetlink_rcv_msg+0x95e/0xe90 [ 447.700084][T19752] page last free pid 5146 tgid 5146 ts 19331743579 stack trace: [ 447.700092][T19752] __free_frozen_pages+0x79f/0x10f0 [ 447.700106][T19752] qlist_free_all+0x47/0xf0 [ 447.700116][T19752] kasan_quarantine_reduce+0x1a0/0x1f0 [ 447.700127][T19752] __kasan_slab_alloc+0x69/0x90 [ 447.700139][T19752] kmem_cache_alloc_noprof+0x269/0x6a0 [ 447.700150][T19752] do_getname+0x35/0x390 [ 447.700164][T19752] do_utimes_path+0xc9/0x1b0 [ 447.700179][T19752] do_utimes+0x34/0x100 [ 447.700191][T19752] __x64_sys_utimensat+0x1c6/0x290 [ 447.700205][T19752] do_syscall_64+0x121/0x770 [ 447.700218][T19752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.700229][T19752] [ 447.700231][T19752] Memory state around the buggy address: [ 447.700236][T19752] ffff88804d8c2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 447.700244][T19752] ffff88804d8c2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.700252][T19752] >ffff88804d8c2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.700258][T19752] ^ [ 447.700264][T19752] ffff88804d8c2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.700271][T19752] ffff88804d8c2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 447.700277][T19752] ================================================================== [ 447.700433][T19752] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 448.064300][T19752] CPU: 0 UID: 0 PID: 19752 Comm: syz.5.4195 Not tainted syzkaller #0 PREEMPT(full) [ 448.067609][T19752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.070404][T19752] Call Trace: [ 448.071728][T19752] [ 448.072731][T19752] dump_stack_lvl+0x100/0x190 [ 448.074355][T19752] vpanic+0x553/0x970 [ 448.075672][T19752] ? __pfx_vpanic+0x10/0x10 [ 448.077131][T19752] ? mark_held_locks+0x40/0x70 [ 448.078691][T19752] ? gadgetfs_bind+0x82e/0x890 [ 448.080217][T19752] panic+0xd1/0xe0 [ 448.081415][T19752] ? __pfx_panic+0x10/0x10 [ 448.082858][T19752] ? gadgetfs_bind+0x82e/0x890 [ 448.084476][T19752] ? preempt_schedule_common+0x3c/0xb0 [ 448.086297][T19752] check_panic_on_warn.cold+0x19/0x34 [ 448.088111][T19752] end_report.part.0+0x3a/0x90 [ 448.089951][T19752] kasan_report.cold+0xe/0x18 [ 448.091779][T19752] ? gadgetfs_bind+0x82e/0x890 [ 448.093698][T19752] gadgetfs_bind+0x82e/0x890 [ 448.095307][T19752] ? kernfs_create_link+0x1bd/0x240 [ 448.096959][T19752] gadget_bind_driver+0x28c/0xbf0 [ 448.098571][T19752] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 448.100342][T19752] ? __pfx_gadget_bind_driver+0x10/0x10 [ 448.102015][T19752] really_probe+0x241/0xa60 [ 448.103472][T19752] __driver_probe_device+0x210/0x460 [ 448.105277][T19752] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.107529][T19752] driver_probe_device+0x4a/0x140 [ 448.109460][T19752] __driver_attach+0x21f/0x5b0 [ 448.111333][T19752] ? __pfx___driver_attach+0x10/0x10 [ 448.113000][T19752] bus_for_each_dev+0x13e/0x1d0 [ 448.114759][T19752] ? __pfx_bus_for_each_dev+0x10/0x10 [ 448.116628][T19752] ? bus_add_driver+0x2b5/0x5b0 [ 448.118123][T19752] bus_add_driver+0x305/0x5b0 [ 448.119583][T19752] driver_register+0x1e2/0x360 [ 448.121325][T19752] usb_gadget_register_driver_owner+0x132/0x210 [ 448.123645][T19752] dev_config+0xdce/0x1610 [ 448.125410][T19752] ? ksys_write+0x70/0x250 [ 448.127415][T19752] ? __pfx_dev_config+0x10/0x10 [ 448.129534][T19752] vfs_write+0x2aa/0x1050 [ 448.131313][T19752] ? __pfx_dev_config+0x10/0x10 [ 448.133050][T19752] ? lock_acquire+0x1d1/0x380 [ 448.134937][T19752] ? __fget_files+0x34/0x3d0 [ 448.136633][T19752] ? __pfx_vfs_write+0x10/0x10 [ 448.138169][T19752] ? find_held_lock+0x2b/0x80 [ 448.139721][T19752] ? __fget_files+0x215/0x3d0 [ 448.141170][T19752] ? __fget_files+0x21f/0x3d0 [ 448.142870][T19752] ksys_write+0x12a/0x250 [ 448.144469][T19752] ? __pfx_ksys_write+0x10/0x10 [ 448.146083][T19752] __do_fast_syscall_32+0x13a/0x8b0 [ 448.147830][T19752] do_fast_syscall_32+0x32/0x70 [ 448.149439][T19752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.151623][T19752] RIP: 0023:0xf7fa3fec [ 448.153250][T19752] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 448.156208][T19752] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 448.159702][T19752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 448.162215][T19752] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 448.164765][T19752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.167302][T19752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.169925][T19752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.172440][T19752] [ 448.174087][T19752] Kernel Offset: disabled [ 448.175740][T19752] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:40:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ae0285 RDI=ffffffff9bc4f1e0 RBP=ffffffff9bc4f1a0 RSP=ffffc9000623f0d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666657 R12=0000000000000000 R13=0000000000000020 R14=000000000000000e R15=ffffc9000623f3f0 RIP=ffffffff85ae02af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096968000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7228c10 CR3=0000000063de5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801cb0cb00 RSI=ffffffff81b64e9e RDI=ffff88801cb0cb00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b64e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a68000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fe7fe3 RDX=0000000000000002 RSI=0000000000000000 RDI=ffff88802979cb00 RBP=ffff88802b543b00 RSP=ffffc900047773c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10052f3c13 R13=0000000000000003 R14=ffffed10056a8761 R15=0000000000000001 RIP=ffffffff820b3330 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b68000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f16ec0 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc9000042fdb4 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81e97db3 RDI=ffff88801c760000 RBP=ffffc9000042fda8 RSP=ffffc9000042f960 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=6d6d756420636475 R12=ffffffff8fbd6c00 R13=ffffc9000042fda8 R14=0000000000000000 R15=ffffc9000042fdb4 RIP=ffffffff81e97dbe RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c68000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f278b45deac CR3=000000005143c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0ffe000 Opmask01=000000000000001f Opmask02=000000001fff01ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f278b4beb00 00007f278b4beb00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f278b4beb10 00007f278b4beb10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff0f0e0d0c0b0a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000008784873d 656d616e74736f68 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000873d656d61 6e74736f68018287 0000000000000065 6d616e74736f685f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e480fd7268 0000000000000000 000000656d616e74 736f685f6465656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000873d400182 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 00000000873d7373 6e64725f77656e01 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000