last executing test programs: 1.540431069s ago: executing program 0 (id=1122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r3, 0x3}, 0x8) 1.019766421s ago: executing program 3 (id=1135): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 940.055538ms ago: executing program 3 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x48}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 939.415904ms ago: executing program 3 (id=1138): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800e3ff0100000000000000000000049500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x154}}, 0x40000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) close(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x24000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000", @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 870.697258ms ago: executing program 3 (id=1139): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000700)=""/89, 0x59}], 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000280)=""/172, 0xac, 0x0, &(0x7f0000000340)=""/120, 0x78}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @typedef={0xa}, @typedef={0x5, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000000440), 0x43, 0x0, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xffffff1a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x27, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdab2, 0x0, 0x0, 0x0, 0x593}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x1, 0x67, &(0x7f0000000280)=""/103, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, r8, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r6, 0x5, &(0x7f0000000700)=[r5, r0, r4, r3, r4, r0, r5], &(0x7f0000000740)=[{0x4, 0x2}, {0x3, 0x2, 0x4, 0xb}, {0x0, 0x1, 0x9, 0x9}, {0x5, 0x2, 0xa, 0x1}, {0x0, 0x3, 0x8, 0x4}], 0x10, 0xc0}, 0x94) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000880)={@initdev, @dev}, &(0x7f00000008c0)=0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) gettid() 710.377864ms ago: executing program 0 (id=1141): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000b00)='7hd', 0x3}], 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 529.280959ms ago: executing program 0 (id=1152): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 470.515256ms ago: executing program 0 (id=1153): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x2a, "4c2a3b66662e5ac484c75c841f10a7f3b2b15b7deb3c123aa7bf806f912d13183b7c1f5b0a1ccb781ae9bd7b6aaa2831131204facb4b73ad234a66203ba534b8eb2ce6be1c16e223f32796440d7960035dcd61e908a1fcc4c9e59404ca7323a08556d3be3ff9abbf0060b77cc8d228ddfdd1e11f833a9473e96240ffdf83cadc"}) 469.812516ms ago: executing program 0 (id=1156): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0xffffffffffffdffd, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r1, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 399.243102ms ago: executing program 1 (id=1159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000ff00000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0xd4, &(0x7f00000002c0)={0x40000, 0x80002, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 398.378313ms ago: executing program 0 (id=1160): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0xee, 0x4000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000dbafc280100000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r5 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) fcntl$addseals(r5, 0x409, 0xb) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r6, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 398.195239ms ago: executing program 1 (id=1161): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000b00)='7hd', 0x3}], 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 250.426322ms ago: executing program 2 (id=1166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)) 190.426502ms ago: executing program 2 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 190.120318ms ago: executing program 1 (id=1168): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x8, 0xffffffffffffdffd, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r1, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 189.98953ms ago: executing program 2 (id=1169): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 189.50377ms ago: executing program 1 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x1004006, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r0}, 0x38) 130.27576ms ago: executing program 2 (id=1171): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103361) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, {0xffffffffffffffff, 0x2, 0x400000b, 0x0, 0xfbfffffe}, 0xfffffffe}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 130.121644ms ago: executing program 1 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) 60.608452ms ago: executing program 1 (id=1173): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}], 0x30, 0x8004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', 'syz1\x00'}, &(0x7f00000002c0)=""/195, 0xc3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 60.203004ms ago: executing program 2 (id=1174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x1002, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 410.799µs ago: executing program 3 (id=1175): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x20004884, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 240.622µs ago: executing program 2 (id=1176): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 0s ago: executing program 3 (id=1177): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f00000009c0)="9d7fcf3efc6300b3b2377876021d7131b838059f96bd206d4776b444405422368ed2a92432e5af71000000000000000000000000000000008a596976dd10f3928b006bb2c2760977caf15455525ae6227e246681dcba160dde12ddcee430eacdfb6d9ec7a60ffdef417b662007c1f9ffa86530ba7ff75622b154afd53c6b4931f4be2d90ca60b1fbe6dc02aa051c9a9c05557a7fd376f174908fd1a6dc0aad663e010a10117c304eb7e40d629aa8ecd0f847fc0efe9ddab4545505105ba291410c1cb0e4d50bd63e8fa06fc4", 0xcc}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25937' (ED25519) to the list of known hosts. [ 42.476266][ T5868] cgroup: Unknown subsys name 'net' [ 42.624213][ T5868] cgroup: Unknown subsys name 'cpuset' [ 42.629437][ T5868] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.607850][ T5868] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.132548][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.136209][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.140255][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.144247][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.148301][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.150841][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.151118][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.154667][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.160865][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.163744][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.164863][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.168127][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.170561][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.174690][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.177407][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.183496][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.183526][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.187998][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.190483][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.196203][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.493049][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 47.563257][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 47.643707][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 47.707882][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.711891][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.714279][ T5936] bridge_slave_0: entered allmulticast mode [ 47.716921][ T5936] bridge_slave_0: entered promiscuous mode [ 47.720646][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.723300][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.726178][ T5936] bridge_slave_1: entered allmulticast mode [ 47.728749][ T5936] bridge_slave_1: entered promiscuous mode [ 47.751149][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 47.838495][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.841055][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.843321][ T5935] bridge_slave_0: entered allmulticast mode [ 47.845934][ T5935] bridge_slave_0: entered promiscuous mode [ 47.850647][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.874539][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.876853][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.879098][ T5935] bridge_slave_1: entered allmulticast mode [ 47.881873][ T5935] bridge_slave_1: entered promiscuous mode [ 47.886326][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.033426][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.038294][ T5936] team0: Port device team_slave_0 added [ 48.056814][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.059071][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.062103][ T5943] bridge_slave_0: entered allmulticast mode [ 48.065389][ T5943] bridge_slave_0: entered promiscuous mode [ 48.070203][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.075047][ T5936] team0: Port device team_slave_1 added [ 48.077375][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.080499][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.083521][ T5947] bridge_slave_0: entered allmulticast mode [ 48.087322][ T5947] bridge_slave_0: entered promiscuous mode [ 48.091825][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.094146][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.096379][ T5943] bridge_slave_1: entered allmulticast mode [ 48.099001][ T5943] bridge_slave_1: entered promiscuous mode [ 48.168263][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.170855][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.173260][ T5947] bridge_slave_1: entered allmulticast mode [ 48.175941][ T5947] bridge_slave_1: entered promiscuous mode [ 48.210674][ T5935] team0: Port device team_slave_0 added [ 48.262643][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.267801][ T5935] team0: Port device team_slave_1 added [ 48.296802][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.299112][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.307221][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.311924][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.314451][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.325337][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.331801][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.337104][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.364326][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.366527][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.374464][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.380728][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.415794][ T5943] team0: Port device team_slave_0 added [ 48.418752][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.423604][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.433000][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.488730][ T5943] team0: Port device team_slave_1 added [ 48.545778][ T5947] team0: Port device team_slave_0 added [ 48.550818][ T5947] team0: Port device team_slave_1 added [ 48.553847][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.556035][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.565027][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.593261][ T5936] hsr_slave_0: entered promiscuous mode [ 48.596450][ T5936] hsr_slave_1: entered promiscuous mode [ 48.614185][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.616373][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.624435][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.660684][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.662970][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.671173][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.691478][ T5935] hsr_slave_0: entered promiscuous mode [ 48.693715][ T5935] hsr_slave_1: entered promiscuous mode [ 48.695796][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 48.697666][ T5935] Cannot create hsr debugfs directory [ 48.703720][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.705980][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.714792][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.881231][ T5943] hsr_slave_0: entered promiscuous mode [ 48.884282][ T5943] hsr_slave_1: entered promiscuous mode [ 48.887032][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 48.889390][ T5943] Cannot create hsr debugfs directory [ 48.939851][ T5947] hsr_slave_0: entered promiscuous mode [ 48.942680][ T5947] hsr_slave_1: entered promiscuous mode [ 48.945488][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 48.947867][ T5947] Cannot create hsr debugfs directory [ 49.180685][ T5951] Bluetooth: hci1: command tx timeout [ 49.181069][ T5944] Bluetooth: hci0: command tx timeout [ 49.259819][ T5944] Bluetooth: hci2: command tx timeout [ 49.259879][ T5951] Bluetooth: hci3: command tx timeout [ 49.274957][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.280823][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.285520][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.299183][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.323537][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.331570][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.335672][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.341771][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.395427][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.401269][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.412627][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.417479][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.511831][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.516294][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.535903][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.541628][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.553519][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.572987][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.587050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.589521][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.606074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.608404][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.616470][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.655615][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.663979][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.687070][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.690228][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.707396][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.712957][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.715463][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.725508][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.732295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.734608][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.747934][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.750547][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.774021][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.787912][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.791063][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.816906][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.819227][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.869256][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.903348][ T5936] veth0_vlan: entered promiscuous mode [ 49.921918][ T5936] veth1_vlan: entered promiscuous mode [ 49.947594][ T5936] veth0_macvtap: entered promiscuous mode [ 49.953554][ T5936] veth1_macvtap: entered promiscuous mode [ 49.957959][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.975012][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.989061][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.005240][ T94] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.011755][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.022519][ T94] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.034553][ T94] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.038085][ T94] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.057299][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.081890][ T5947] veth0_vlan: entered promiscuous mode [ 50.082118][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.086737][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.111664][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.113016][ T5943] veth0_vlan: entered promiscuous mode [ 50.114257][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.116401][ T5947] veth1_vlan: entered promiscuous mode [ 50.131706][ T5943] veth1_vlan: entered promiscuous mode [ 50.151483][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.156196][ T5947] veth0_macvtap: entered promiscuous mode [ 50.164995][ T5947] veth1_macvtap: entered promiscuous mode [ 50.172285][ T5935] veth0_vlan: entered promiscuous mode [ 50.186053][ T5935] veth1_vlan: entered promiscuous mode [ 50.188843][ T5943] veth0_macvtap: entered promiscuous mode [ 50.197520][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.204587][ T5943] veth1_macvtap: entered promiscuous mode [ 50.216932][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.229997][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.233889][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.241714][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.245388][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.256354][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.268159][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.275110][ T5935] veth0_macvtap: entered promiscuous mode [ 50.281328][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.288273][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.291429][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.299057][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.304247][ T5935] veth1_macvtap: entered promiscuous mode [ 50.332179][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.334336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.341873][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.356742][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.362436][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.365003][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.384064][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.387054][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.392009][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.394540][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.406043][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.409026][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.422284][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.424790][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.461995][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.464941][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.496995][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.499493][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.578398][ T6032] ALSA: seq fatal error: cannot create timer (-22) [ 50.741736][ T6042] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 51.185225][ T6067] netlink: 256 bytes leftover after parsing attributes in process `syz.3.19'. [ 51.188218][ T6067] ksmbd: Unknown IPC event: 3, ignore. [ 51.246053][ T40] audit: type=1326 audit(1762429651.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.255111][ T40] audit: type=1326 audit(1762429651.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.263229][ T5951] Bluetooth: hci0: command tx timeout [ 51.264021][ T40] audit: type=1326 audit(1762429651.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.21" exe="/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.273980][ T40] audit: type=1326 audit(1762429651.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.0.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.350204][ T5951] Bluetooth: hci3: command tx timeout [ 51.351253][ T5944] Bluetooth: hci2: command tx timeout [ 51.548439][ T6100] netlink: 'syz.0.31': attribute type 3 has an invalid length. [ 51.733459][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 51.771533][ T40] audit: type=1326 audit(1762429652.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.777966][ T40] audit: type=1326 audit(1762429652.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.785145][ T40] audit: type=1326 audit(1762429652.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.38" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.792043][ T40] audit: type=1326 audit(1762429652.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.799435][ T40] audit: type=1326 audit(1762429652.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.807335][ T40] audit: type=1326 audit(1762429652.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.38" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 51.859157][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.231785][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 52.269333][ T6087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.272201][ T6087] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.277325][ T6087] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.282286][ T6087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.284258][ T6087] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.287850][ T6087] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.292128][ T6087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.293815][ T6087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.296341][ T6087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.305295][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.308740][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.315302][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.319540][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.323647][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.415458][ T6134] syzkaller0: entered promiscuous mode [ 52.417695][ T6134] syzkaller0: entered allmulticast mode [ 52.517051][ T6146] netlink: 123 bytes leftover after parsing attributes in process `syz.0.49'. [ 52.536371][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 52.588499][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 52.591547][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 52.591605][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 52.591648][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 52.599823][ T10] hid-generic 0000:3000000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 52.689256][ T6155] fido_id[6155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.750364][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.752784][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.755075][ T6124] bridge_slave_0: entered allmulticast mode [ 52.757718][ T6124] bridge_slave_0: entered promiscuous mode [ 52.762345][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.765138][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.768064][ T6124] bridge_slave_1: entered allmulticast mode [ 52.773179][ T6124] bridge_slave_1: entered promiscuous mode [ 52.849384][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.857631][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.916894][ T6124] team0: Port device team_slave_0 added [ 52.921047][ T6124] team0: Port device team_slave_1 added [ 52.967225][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.970316][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.980829][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.986662][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.988981][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.998932][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.057785][ T6191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.087876][ T6124] hsr_slave_0: entered promiscuous mode [ 53.090294][ T6124] hsr_slave_1: entered promiscuous mode [ 53.093338][ T6124] debugfs: 'hsr0' already exists in 'hsr' [ 53.095657][ T6124] Cannot create hsr debugfs directory [ 53.095748][ T6193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.134946][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.234811][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.353695][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.477138][ T12] bridge_slave_1: left allmulticast mode [ 53.479424][ T12] bridge_slave_1: left promiscuous mode [ 53.482832][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.487547][ T12] bridge_slave_0: left allmulticast mode [ 53.489358][ T12] bridge_slave_0: left promiscuous mode [ 53.492165][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.579963][ T5944] Bluetooth: hci0: command 0x0419 tx timeout [ 53.696570][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.701901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.705455][ T12] bond0 (unregistering): Released all slaves [ 53.907061][ T6220] netlink: 123 bytes leftover after parsing attributes in process `syz.0.78'. [ 53.977088][ T6225] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.052616][ T12] hsr_slave_0: left promiscuous mode [ 54.055583][ T12] hsr_slave_1: left promiscuous mode [ 54.058366][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.061602][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.065506][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.067754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.104035][ T12] veth1_macvtap: left promiscuous mode [ 54.105841][ T12] veth0_macvtap: left promiscuous mode [ 54.107593][ T12] veth1_vlan: left promiscuous mode [ 54.109285][ T12] veth0_vlan: left promiscuous mode [ 54.110026][ T6222] program syz.2.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.300294][ T5944] Bluetooth: hci3: command 0x0419 tx timeout [ 54.300325][ T5951] Bluetooth: hci2: command 0x0419 tx timeout [ 54.391325][ T5951] Bluetooth: hci1: command tx timeout [ 54.585905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 54.632975][ T12] team0 (unregistering): Port device team_slave_0 removed [ 54.997527][ T6246] syzkaller0: entered promiscuous mode [ 54.999375][ T6246] syzkaller0: entered allmulticast mode [ 55.041931][ T6124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.047119][ T6124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.055061][ T6124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.063149][ T6124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.113254][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.117377][ T6267] netlink: 123 bytes leftover after parsing attributes in process `syz.2.89'. [ 55.122392][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.128348][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.130867][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.143481][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.145878][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.178601][ T6124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.229211][ T6272] netlink: 'syz.2.91': attribute type 3 has an invalid length. [ 55.267259][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 55.306582][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.364116][ T6124] veth0_vlan: entered promiscuous mode [ 55.369212][ T6124] veth1_vlan: entered promiscuous mode [ 55.385115][ T6124] veth0_macvtap: entered promiscuous mode [ 55.388784][ T6124] veth1_macvtap: entered promiscuous mode [ 55.400246][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.408354][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.423066][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.436337][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.439480][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.443545][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.479913][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.483162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.497474][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.501799][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.660106][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 55.685077][ T6293] syzkaller0: entered promiscuous mode [ 55.686886][ T6293] syzkaller0: entered allmulticast mode [ 55.877336][ T6303] netlink: 123 bytes leftover after parsing attributes in process `syz.1.103'. [ 55.910401][ T6305] program syz.2.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.049038][ T6317] syzkaller0: entered promiscuous mode [ 56.054299][ T6317] syzkaller0: entered allmulticast mode [ 56.248120][ T6334] netlink: 123 bytes leftover after parsing attributes in process `syz.0.117'. [ 56.389968][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 56.389993][ T5948] Bluetooth: hci3: command 0x0419 tx timeout [ 56.469819][ T5948] Bluetooth: hci1: command tx timeout [ 56.873329][ T6341] netlink: 76 bytes leftover after parsing attributes in process `syz.2.120'. [ 57.083958][ T6341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.120'. [ 57.087699][ T40] kauditd_printk_skb: 163 callbacks suppressed [ 57.087707][ T40] audit: type=1326 audit(1762429657.820:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 57.096846][ T40] audit: type=1326 audit(1762429657.830:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 57.140761][ T6345] syzkaller0: entered promiscuous mode [ 57.142922][ T6345] syzkaller0: entered allmulticast mode [ 57.731492][ T6360] netlink: 468 bytes leftover after parsing attributes in process `syz.2.127'. [ 58.307950][ T6354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.310369][ T6354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.312989][ T6354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.315147][ T6354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.317156][ T6354] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.320625][ T6354] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.367954][ T6365] netlink: 123 bytes leftover after parsing attributes in process `syz.2.128'. [ 58.379894][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 58.379913][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 58.425213][ T6369] Zero length message leads to an empty skb [ 58.442150][ T6371] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 58.445202][ T6371] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 58.447817][ T6371] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 58.476519][ T6373] syzkaller0: entered promiscuous mode [ 58.478302][ T6373] syzkaller0: entered allmulticast mode [ 58.909151][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 58.977061][ T6391] bridge_slave_0: left allmulticast mode [ 58.979276][ T6391] bridge_slave_0: left promiscuous mode [ 58.983343][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.991379][ T6391] bridge_slave_1: left allmulticast mode [ 58.993893][ T6391] bridge_slave_1: left promiscuous mode [ 59.000167][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.014146][ T6391] bond0: (slave bond_slave_0): Releasing backup interface [ 59.022259][ T6391] bond0: (slave bond_slave_1): Releasing backup interface [ 59.032636][ T6391] team0: Port device team_slave_0 removed [ 59.094206][ T40] audit: type=1326 audit(1762429659.830:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.102081][ T40] audit: type=1326 audit(1762429659.830:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.108701][ T40] audit: type=1326 audit(1762429659.830:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.115264][ T40] audit: type=1326 audit(1762429659.830:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.122673][ T40] audit: type=1326 audit(1762429659.830:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.130752][ T40] audit: type=1326 audit(1762429659.830:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.139099][ T40] audit: type=1326 audit(1762429659.840:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.147255][ T40] audit: type=1326 audit(1762429659.840:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 59.251238][ T6391] team0: Port device team_slave_1 removed [ 59.254373][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.257378][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.261353][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.263736][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.267579][ T6391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.283448][ T6396] team0: Mode changed to "roundrobin" [ 59.286109][ T6402] syzkaller0: entered promiscuous mode [ 59.287959][ T6402] syzkaller0: entered allmulticast mode [ 59.328456][ T6411] IPv6: Can't replace route, no match found [ 59.411990][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 59.564061][ T6434] netlink: 123 bytes leftover after parsing attributes in process `syz.1.155'. [ 59.576493][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 59.590087][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 59.697552][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 59.737180][ T6447] syzkaller0: entered promiscuous mode [ 59.750276][ T6447] syzkaller0: entered allmulticast mode [ 60.379861][ T5951] Bluetooth: hci1: command 0x0419 tx timeout [ 60.380196][ T5948] Bluetooth: hci3: command 0x0419 tx timeout [ 60.380399][ T5944] Bluetooth: hci2: command 0x0419 tx timeout [ 60.399790][ T5940] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.407901][ T6484] syzkaller0: entered promiscuous mode [ 60.410654][ T6484] syzkaller0: entered allmulticast mode [ 60.558604][ T5940] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 60.562514][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.565862][ T5940] usb 5-1: Product: syz [ 60.567593][ T5940] usb 5-1: Manufacturer: syz [ 60.569528][ T5940] usb 5-1: SerialNumber: syz [ 60.675727][ T9] cfg80211: failed to load regulatory.db [ 60.818286][ T5940] rtl8150 5-1:1.0: couldn't reset the device [ 60.821639][ T5940] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 60.829750][ T5940] usb 5-1: USB disconnect, device number 2 [ 61.496670][ T6548] __nla_validate_parse: 4 callbacks suppressed [ 61.496685][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 61.634163][ T6560] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 61.659935][ T5948] Bluetooth: hci0: command 0x0419 tx timeout [ 61.661333][ T6554] netlink: 'syz.2.204': attribute type 4 has an invalid length. [ 61.665014][ T6554] netlink: 152 bytes leftover after parsing attributes in process `syz.2.204'. [ 61.802043][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 62.109979][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'. [ 62.142242][ T40] kauditd_printk_skb: 231 callbacks suppressed [ 62.142252][ T40] audit: type=1326 audit(1762429662.880:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.151136][ T40] audit: type=1326 audit(1762429662.890:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.160071][ T40] audit: type=1326 audit(1762429662.890:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.166876][ T40] audit: type=1326 audit(1762429662.890:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.189812][ T40] audit: type=1326 audit(1762429662.890:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.196274][ T40] audit: type=1326 audit(1762429662.890:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.208360][ T40] audit: type=1326 audit(1762429662.890:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.215988][ T40] audit: type=1326 audit(1762429662.890:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.223403][ T40] audit: type=1326 audit(1762429662.890:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.230068][ T40] audit: type=1326 audit(1762429662.890:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.2.227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 62.251483][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 62.467979][ T5951] Bluetooth: hci2: command 0x0419 tx timeout [ 62.468826][ T5944] Bluetooth: hci3: command 0x0419 tx timeout [ 62.470095][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 62.528860][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 62.671200][ T6653] syzkaller0: entered promiscuous mode [ 62.673358][ T6653] syzkaller0: entered allmulticast mode [ 62.743645][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 62.802613][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 62.937873][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 63.074147][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 64.045939][ T6743] bridge_slave_0: left allmulticast mode [ 64.047749][ T6743] bridge_slave_0: left promiscuous mode [ 64.049566][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.053793][ T6743] bridge_slave_1: left allmulticast mode [ 64.056075][ T6743] bridge_slave_1: left promiscuous mode [ 64.058193][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.064610][ T6743] bond0: (slave bond_slave_0): Releasing backup interface [ 64.068658][ T6743] bond0: (slave bond_slave_1): Releasing backup interface [ 64.076274][ T6743] team0: Port device team_slave_0 removed [ 64.081586][ T6743] team0: Port device team_slave_1 removed [ 64.083767][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.086085][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.089092][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.092579][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.093713][ T6750] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 64.098589][ T6743] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.111798][ T6750] team0: entered promiscuous mode [ 64.113573][ T6750] bridge0: port 1(team0) entered blocking state [ 64.115660][ T6750] bridge0: port 1(team0) entered disabled state [ 64.118364][ T6750] team0: entered allmulticast mode [ 64.278004][ T6764] bond0: entered promiscuous mode [ 64.281320][ T6764] bond0: left promiscuous mode [ 64.333393][ T6769] bond0: entered promiscuous mode [ 64.337669][ T6769] bond0: left promiscuous mode [ 64.539949][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 65.201050][ T5349] udevd[5349]: worker [6179] terminated by signal 33 (Unknown signal 33) [ 65.204504][ T5349] udevd[5349]: worker [6179] failed while handling '/devices/virtual/block/loop2' [ 65.852321][ T6843] syzkaller0: entered promiscuous mode [ 65.854635][ T6843] syzkaller0: entered allmulticast mode [ 66.075608][ T6859] loop9: detected capacity change from 0 to 7 [ 66.082241][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.086043][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.092933][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.096600][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.100209][ T5938] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.429792][ T6081] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 66.559834][ T6081] usb 8-1: device descriptor read/64, error -71 [ 66.619826][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 66.810195][ T6081] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 66.969741][ T6081] usb 8-1: device descriptor read/64, error -71 [ 66.981790][ T6879] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 67.080310][ T6081] usb usb8-port1: attempt power cycle [ 67.224178][ T40] kauditd_printk_skb: 142 callbacks suppressed [ 67.224192][ T40] audit: type=1326 audit(1762429667.960:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.245585][ T40] audit: type=1326 audit(1762429667.970:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.261497][ T6868] netlink: 'syz.0.337': attribute type 5 has an invalid length. [ 67.264897][ T40] audit: type=1326 audit(1762429668.000:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.275997][ T40] audit: type=1326 audit(1762429668.000:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.285889][ T40] audit: type=1326 audit(1762429668.000:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.294823][ T40] audit: type=1326 audit(1762429668.000:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.307006][ T40] audit: type=1326 audit(1762429668.010:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.315605][ T40] audit: type=1326 audit(1762429668.010:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.0.337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 67.396975][ T6829] Set syz1 is full, maxelem 65536 reached [ 67.442497][ T6081] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 67.476061][ T6081] usb 8-1: device descriptor read/8, error -71 [ 67.719803][ T6081] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 67.742391][ T6081] usb 8-1: device descriptor read/8, error -71 [ 67.849871][ T6081] usb usb8-port1: unable to enumerate USB device [ 67.916580][ T6905] syzkaller0: entered promiscuous mode [ 67.918274][ T6905] syzkaller0: entered allmulticast mode [ 68.103978][ T6908] syzkaller0: entered promiscuous mode [ 68.105834][ T6908] syzkaller0: entered allmulticast mode [ 68.195967][ T40] audit: type=1326 audit(1762429668.930:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 68.203514][ T40] audit: type=1326 audit(1762429668.930:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 68.562494][ T6933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.685260][ T6933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.741204][ T6933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.820732][ T6933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.949314][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.961679][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.969226][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.976317][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.120033][ T6947] process 'syz.0.366' launched './file0' with NULL argv: empty string added [ 69.253301][ T6959] syzkaller0: entered promiscuous mode [ 69.255041][ T6959] syzkaller0: entered allmulticast mode [ 69.626250][ T6973] __nla_validate_parse: 6 callbacks suppressed [ 69.626263][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 69.729311][ T6979] syzkaller0: entered promiscuous mode [ 69.731725][ T6979] syzkaller0: entered allmulticast mode [ 70.143928][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 70.219053][ T7004] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.238326][ T7004] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.265558][ T7008] lo speed is unknown, defaulting to 1000 [ 70.268293][ T7008] lo speed is unknown, defaulting to 1000 [ 70.272465][ T7008] lo speed is unknown, defaulting to 1000 [ 70.284678][ T7008] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.289996][ T7011] netlink: 36 bytes leftover after parsing attributes in process `syz.3.389'. [ 70.303209][ T7008] lo speed is unknown, defaulting to 1000 [ 70.305836][ T7008] lo speed is unknown, defaulting to 1000 [ 70.308360][ T7008] lo speed is unknown, defaulting to 1000 [ 70.311600][ T7008] lo speed is unknown, defaulting to 1000 [ 70.433116][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 70.499173][ T7025] lo speed is unknown, defaulting to 1000 [ 70.693801][ T7033] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 70.783743][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.844070][ T7036] syzkaller0: entered promiscuous mode [ 70.845954][ T7036] syzkaller0: entered allmulticast mode [ 71.402214][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 71.472866][ T7072] tipc: Enabling of bearer rejected, failed to enable media [ 71.483150][ T7070] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 71.509258][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.334864][ T7099] tipc: Enabling of bearer rejected, failed to enable media [ 72.337972][ T7099] syzkaller0: entered promiscuous mode [ 72.339829][ T7099] syzkaller0: entered allmulticast mode [ 72.454858][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 72.739058][ T40] kauditd_printk_skb: 398 callbacks suppressed [ 72.739073][ T40] audit: type=1326 audit(1762429673.470:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.751547][ T40] audit: type=1326 audit(1762429673.470:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.760185][ T40] audit: type=1326 audit(1762429673.480:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.761742][ T7135] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 72.769158][ T40] audit: type=1326 audit(1762429673.480:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.782361][ T40] audit: type=1326 audit(1762429673.480:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.783262][ T7138] macvtap0: refused to change device tx_queue_len [ 72.790926][ T40] audit: type=1326 audit(1762429673.480:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.790955][ T40] audit: type=1326 audit(1762429673.480:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.790976][ T40] audit: type=1326 audit(1762429673.480:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.790995][ T40] audit: type=1326 audit(1762429673.480:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.791015][ T40] audit: type=1326 audit(1762429673.480:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.3.435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.841522][ T7135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.985894][ T7158] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 73.137712][ T7176] netlink: 'syz.3.452': attribute type 13 has an invalid length. [ 73.362126][ T7189] siw: device registration error -23 [ 73.446126][ T5940] lo speed is unknown, defaulting to 1000 [ 73.448037][ T5940] syz0: Port: 1 Link DOWN [ 73.452021][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.455243][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.461526][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.465939][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.904332][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 74.022441][ T7211] tipc: Enabling of bearer rejected, failed to enable media [ 74.022939][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 74.138625][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 74.226491][ T5940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.232406][ T5940] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 74.517118][ T7238] syzkaller0: entered promiscuous mode [ 74.519551][ T7238] syzkaller0: entered allmulticast mode [ 74.603791][ T7244] netlink: 'syz.0.477': attribute type 39 has an invalid length. [ 74.830210][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 74.834478][ T7247] syzkaller0: entered promiscuous mode [ 74.836803][ T7247] syzkaller0: entered allmulticast mode [ 74.857795][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 75.181416][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 75.230152][ T7271] tipc: Enabling of bearer rejected, failed to enable media [ 75.233968][ T7271] syzkaller0: entered promiscuous mode [ 75.236102][ T7271] syzkaller0: entered allmulticast mode [ 75.271068][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 75.911470][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 76.015111][ T7330] lo speed is unknown, defaulting to 1000 [ 76.983083][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 77.303424][ T7382] netlink: 96 bytes leftover after parsing attributes in process `syz.1.534'. [ 77.506516][ T7408] vlan2: entered allmulticast mode [ 77.655325][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 77.656506][ T7420] netlink: 104 bytes leftover after parsing attributes in process `syz.0.551'. [ 77.662709][ T7420] netlink: 104 bytes leftover after parsing attributes in process `syz.0.551'. [ 77.759840][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 77.764706][ T40] kauditd_printk_skb: 301 callbacks suppressed [ 77.764719][ T40] audit: type=1326 audit(1762429678.500:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.764949][ T40] audit: type=1326 audit(1762429678.500:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.782040][ T40] audit: type=1326 audit(1762429678.500:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.782064][ T40] audit: type=1326 audit(1762429678.520:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.782084][ T40] audit: type=1326 audit(1762429678.520:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.782465][ T40] audit: type=1326 audit(1762429678.520:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.811322][ T40] audit: type=1326 audit(1762429678.520:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.817992][ T40] audit: type=1326 audit(1762429678.520:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.818018][ T40] audit: type=1326 audit(1762429678.520:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.818062][ T40] audit: type=1326 audit(1762429678.520:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.556" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 77.920359][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 78.006668][ T7445] syzkaller0: entered promiscuous mode [ 78.006681][ T7445] syzkaller0: entered allmulticast mode [ 78.364196][ T7482] syzkaller0: entered promiscuous mode [ 78.366095][ T7482] syzkaller0: entered allmulticast mode [ 78.428988][ T7486] tipc: Enabling of bearer rejected, failed to enable media [ 78.434218][ T7486] syzkaller0: entered promiscuous mode [ 78.436032][ T7486] syzkaller0: entered allmulticast mode [ 78.552520][ T7491] sch_fq: defrate 0 ignored. [ 78.733922][ T7509] syzkaller0: entered promiscuous mode [ 78.736051][ T7509] syzkaller0: entered allmulticast mode [ 78.776925][ T7514] tipc: Enabling of bearer rejected, failed to enable media [ 78.821308][ T7520] lo speed is unknown, defaulting to 1000 [ 78.823803][ T7520] lo speed is unknown, defaulting to 1000 [ 78.827074][ T7520] lo speed is unknown, defaulting to 1000 [ 78.838615][ T7520] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.856424][ T7520] lo speed is unknown, defaulting to 1000 [ 78.859215][ T7520] lo speed is unknown, defaulting to 1000 [ 78.864556][ T7520] lo speed is unknown, defaulting to 1000 [ 78.868119][ T7520] lo speed is unknown, defaulting to 1000 [ 79.065260][ T7536] tipc: Enabling of bearer rejected, failed to enable media [ 79.068943][ T7536] syzkaller0: entered promiscuous mode [ 79.071917][ T7536] syzkaller0: entered allmulticast mode [ 79.219821][ T7541] syzkaller0: entered promiscuous mode [ 79.222419][ T7541] syzkaller0: entered allmulticast mode [ 79.474672][ T7568] syzkaller0: entered promiscuous mode [ 79.476426][ T7568] syzkaller0: entered allmulticast mode [ 79.498010][ T7570] syzkaller0: entered promiscuous mode [ 79.503086][ T7570] syzkaller0: entered allmulticast mode [ 79.673249][ T7585] macvtap0: refused to change device tx_queue_len [ 80.526339][ T7621] tmpfs: Bad value for 'mpol' [ 80.578701][ T7623] __nla_validate_parse: 2 callbacks suppressed [ 80.578716][ T7623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.638'. [ 80.587978][ T7623] netlink: 468 bytes leftover after parsing attributes in process `syz.2.638'. [ 80.652124][ T7629] syzkaller0: entered promiscuous mode [ 80.653963][ T7629] syzkaller0: entered allmulticast mode [ 80.936872][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 80.960860][ T7650] syzkaller0: entered promiscuous mode [ 80.963149][ T7650] syzkaller0: entered allmulticast mode [ 80.967196][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 81.048036][ T7587] Set syz1 is full, maxelem 65536 reached [ 81.126449][ T7664] ALSA: seq fatal error: cannot create timer (-19) [ 81.134664][ T7668] syzkaller0: entered promiscuous mode [ 81.137024][ T7668] syzkaller0: entered allmulticast mode [ 81.257259][ T7680] bridge0: port 3(ipvlan0) entered blocking state [ 81.259380][ T7680] bridge0: port 3(ipvlan0) entered disabled state [ 81.261628][ T7680] ipvlan0: entered allmulticast mode [ 81.263291][ T7680] bridge0: entered allmulticast mode [ 81.266027][ T7680] ipvlan0: left allmulticast mode [ 81.267634][ T7680] bridge0: left allmulticast mode [ 81.270176][ T7684] mmap: syz.3.667 (7684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.325063][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 81.842922][ T7716] syzkaller0: entered promiscuous mode [ 81.844711][ T7716] syzkaller0: entered allmulticast mode [ 82.182145][ T7737] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 82.219208][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 82.228822][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.234270][ T7737] bond2: (slave batadv1): making interface the new active one [ 82.238281][ T7737] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 82.271953][ T7740] bridge0: port 2(ipvlan2) entered blocking state [ 82.274071][ T7740] bridge0: port 2(ipvlan2) entered disabled state [ 82.276255][ T7740] ipvlan2: entered allmulticast mode [ 82.277998][ T7740] bridge0: entered allmulticast mode [ 82.280594][ T7740] ipvlan2: left allmulticast mode [ 82.282248][ T7740] bridge0: left allmulticast mode [ 82.423299][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 82.426607][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 82.440694][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 82.517406][ T7775] tipc: Started in network mode [ 82.519026][ T7775] tipc: Node identity 9ee2e21f4a7c, cluster identity 4711 [ 82.523868][ T7775] tipc: Enabled bearer , priority 0 [ 82.527899][ T7775] tipc: Resetting bearer [ 82.536708][ T7774] tipc: Disabling bearer [ 82.725882][ T7790] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 82.728579][ T7790] macvlan1: entered allmulticast mode [ 82.730519][ T7790] veth1_vlan: entered allmulticast mode [ 82.733223][ T7790] macvlan1: entered promiscuous mode [ 82.735501][ T7790] team0: Port device macvlan1 added [ 82.770719][ T40] kauditd_printk_skb: 344 callbacks suppressed [ 82.770733][ T40] audit: type=1326 audit(1762429683.510:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.779200][ T40] audit: type=1326 audit(1762429683.510:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.795558][ T7788] bridge0: port 1(ipvlan2) entered blocking state [ 82.797796][ T7788] bridge0: port 1(ipvlan2) entered disabled state [ 82.800080][ T40] audit: type=1326 audit(1762429683.510:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.801734][ T7788] ipvlan2: entered allmulticast mode [ 82.806790][ T40] audit: type=1326 audit(1762429683.510:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.806814][ T40] audit: type=1326 audit(1762429683.510:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.808755][ T7788] bridge0: entered allmulticast mode [ 82.819769][ T40] audit: type=1326 audit(1762429683.510:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.823283][ T7788] ipvlan2: left allmulticast mode [ 82.823863][ T40] audit: type=1326 audit(1762429683.510:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.830547][ T7788] bridge0: left allmulticast mode [ 82.841030][ T40] audit: type=1326 audit(1762429683.510:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.847718][ T40] audit: type=1326 audit(1762429683.510:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.855344][ T40] audit: type=1326 audit(1762429683.510:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 82.877627][ T7803] tipc: Enabled bearer , priority 0 [ 82.882579][ T7803] tipc: Resetting bearer [ 82.889291][ T7802] tipc: Disabling bearer [ 83.011344][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 83.149443][ T7831] tipc: Enabled bearer , priority 0 [ 83.153750][ T7831] tipc: Resetting bearer [ 83.161921][ T7830] tipc: Disabling bearer [ 83.196601][ T7834] syzkaller0: entered promiscuous mode [ 83.198681][ T7834] syzkaller0: entered allmulticast mode [ 83.472202][ T7867] tipc: Enabling of bearer rejected, failed to enable media [ 83.544668][ T7876] syzkaller0: entered promiscuous mode [ 83.546853][ T7876] syzkaller0: entered allmulticast mode [ 83.808619][ T7896] lo speed is unknown, defaulting to 1000 [ 83.813759][ T7896] lo speed is unknown, defaulting to 1000 [ 83.824190][ T7899] tipc: Enabling of bearer rejected, failed to enable media [ 84.041004][ T7914] syzkaller0: entered promiscuous mode [ 84.042791][ T7914] syzkaller0: entered allmulticast mode [ 84.170570][ T7922] tipc: Enabling of bearer rejected, failed to enable media [ 84.533960][ T7939] syzkaller0: entered promiscuous mode [ 84.535658][ T7939] syzkaller0: entered allmulticast mode [ 84.602357][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.604824][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.608285][ T7948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.612057][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.654473][ T7946] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 84.874175][ T7976] lo speed is unknown, defaulting to 1000 [ 84.877904][ T7976] lo speed is unknown, defaulting to 1000 [ 85.014959][ T8001] tipc: Enabling of bearer rejected, failed to enable media [ 85.276243][ T8028] tipc: Enabling of bearer rejected, failed to enable media [ 85.481216][ T8049] tipc: Enabling of bearer rejected, failed to enable media [ 85.646378][ T8060] __nla_validate_parse: 13 callbacks suppressed [ 85.646389][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 85.680084][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 85.737182][ T8073] tipc: Enabling of bearer rejected, failed to enable media [ 85.792597][ T8082] tipc: Enabled bearer , priority 0 [ 85.795082][ T8082] syzkaller0: entered promiscuous mode [ 85.796856][ T8082] syzkaller0: entered allmulticast mode [ 85.801566][ T8082] tipc: Resetting bearer [ 85.804484][ T8081] tipc: Resetting bearer [ 85.812113][ T8081] tipc: Disabling bearer [ 85.938242][ T8086] netlink: 96 bytes leftover after parsing attributes in process `syz.3.826'. [ 86.004700][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 86.017702][ T8101] tipc: Enabling of bearer rejected, failed to enable media [ 86.082104][ T8112] tipc: Started in network mode [ 86.083806][ T8112] tipc: Node identity 1ee22554b127, cluster identity 4711 [ 86.086230][ T8112] tipc: Enabled bearer , priority 0 [ 86.088563][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.838'. [ 86.088735][ T8112] syzkaller0: entered promiscuous mode [ 86.093172][ T8112] syzkaller0: entered allmulticast mode [ 86.098964][ T8112] tipc: Resetting bearer [ 86.102726][ T8109] tipc: Resetting bearer [ 86.110884][ T8109] tipc: Disabling bearer [ 86.205984][ T8128] tipc: Enabling of bearer rejected, failed to enable media [ 86.239380][ T8132] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 86.244658][ T8132] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.269929][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 86.274005][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 86.317427][ T8145] tipc: Enabling of bearer rejected, failed to enable media [ 86.449910][ T8159] tipc: Enabled bearer , priority 0 [ 86.452462][ T8159] syzkaller0: entered promiscuous mode [ 86.454166][ T8159] syzkaller0: entered allmulticast mode [ 86.459838][ T8157] lo speed is unknown, defaulting to 1000 [ 86.462350][ T8157] lo speed is unknown, defaulting to 1000 [ 86.467785][ T8158] tipc: Resetting bearer [ 86.476785][ T8158] tipc: Disabling bearer [ 86.689609][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 86.740960][ T8176] tipc: Enabling of bearer rejected, failed to enable media [ 86.749709][ T61] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.906098][ T8195] tipc: Enabled bearer , priority 0 [ 86.908672][ T8195] syzkaller0: entered promiscuous mode [ 86.911465][ T8195] syzkaller0: entered allmulticast mode [ 86.915713][ T61] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 86.918571][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.918702][ T8194] tipc: Resetting bearer [ 86.921103][ T61] usb 8-1: Product: syz [ 86.921112][ T61] usb 8-1: Manufacturer: syz [ 86.921119][ T61] usb 8-1: SerialNumber: syz [ 86.936122][ T8194] tipc: Disabling bearer [ 87.201473][ T61] rtl8150 8-1:1.0: couldn't reset the device [ 87.203664][ T61] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 87.208772][ T61] usb 8-1: USB disconnect, device number 6 [ 87.261058][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 87.535899][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 87.814207][ T8215] tipc: Enabling of bearer rejected, failed to enable media [ 87.875520][ T8222] tipc: Enabled bearer , priority 0 [ 87.878010][ T8222] syzkaller0: entered promiscuous mode [ 87.880693][ T8222] syzkaller0: entered allmulticast mode [ 87.887498][ T8220] tipc: Resetting bearer [ 87.904497][ T8220] tipc: Disabling bearer [ 88.044479][ T8246] tipc: Enabling of bearer rejected, failed to enable media [ 88.083904][ T8251] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 88.192106][ T8273] tipc: Enabling of bearer rejected, failed to enable media [ 88.269850][ T8290] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 88.269850][ T8290] program syz.2.902 not setting count and/or reply_len properly [ 88.291765][ T40] kauditd_printk_skb: 322 callbacks suppressed [ 88.291774][ T40] audit: type=1326 audit(1762429689.030:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.301037][ T40] audit: type=1326 audit(1762429689.030:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.307552][ T40] audit: type=1326 audit(1762429689.030:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.314235][ T40] audit: type=1326 audit(1762429689.040:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.321677][ T40] audit: type=1326 audit(1762429689.040:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.329727][ T40] audit: type=1326 audit(1762429689.040:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.336321][ T40] audit: type=1326 audit(1762429689.040:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.343657][ T40] audit: type=1326 audit(1762429689.040:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.351500][ T40] audit: type=1326 audit(1762429689.040:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.358159][ T40] audit: type=1326 audit(1762429689.040:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.3.904" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 88.485180][ T8314] tipc: Enabled bearer , priority 0 [ 88.488679][ T8314] syzkaller0: entered promiscuous mode [ 88.490663][ T8314] syzkaller0: entered allmulticast mode [ 88.496321][ T8314] tipc: Resetting bearer [ 88.499546][ T8313] tipc: Resetting bearer [ 88.506277][ T8313] tipc: Disabling bearer [ 88.898426][ T8339] tipc: Enabled bearer , priority 0 [ 88.901402][ T8339] syzkaller0: entered promiscuous mode [ 88.903195][ T8339] syzkaller0: entered allmulticast mode [ 88.908903][ T8339] tipc: Resetting bearer [ 88.913426][ T8338] tipc: Resetting bearer [ 88.920500][ T8338] tipc: Disabling bearer [ 89.003317][ T8345] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 89.006445][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.010914][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 89.015357][ T8346] vhci_hcd: connection closed [ 89.016394][ T76] vhci_hcd: stop threads [ 89.020721][ T76] vhci_hcd: release socket [ 89.022385][ T76] vhci_hcd: disconnect device [ 89.381416][ T8373] tipc: Enabling of bearer rejected, failed to enable media [ 89.512521][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.515050][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.519413][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.523041][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.561787][ T8396] tipc: Enabled bearer , priority 0 [ 89.564884][ T8396] syzkaller0: entered promiscuous mode [ 89.566683][ T8396] syzkaller0: entered allmulticast mode [ 89.577219][ T8396] tipc: Resetting bearer [ 89.582441][ T8395] tipc: Resetting bearer [ 89.592587][ T8395] tipc: Disabling bearer [ 89.608608][ T8401] pim6reg1: entered promiscuous mode [ 89.610820][ T8401] pim6reg1: entered allmulticast mode [ 89.705991][ T8405] vlan0: entered allmulticast mode [ 89.770307][ T8411] capability: warning: `syz.3.949' uses deprecated v2 capabilities in a way that may be insecure [ 89.902077][ T5940] IPVS: starting estimator thread 0... [ 89.908924][ T8434] tipc: Enabling of bearer rejected, failed to enable media [ 89.999914][ T8432] IPVS: using max 43 ests per chain, 103200 per kthread [ 90.169034][ T8469] tipc: Enabling of bearer rejected, failed to enable media [ 90.514621][ T8501] tipc: Enabled bearer , priority 0 [ 90.517187][ T8501] syzkaller0: entered promiscuous mode [ 90.518980][ T8501] syzkaller0: entered allmulticast mode [ 90.537962][ T8501] tipc: Resetting bearer [ 90.547347][ T8500] tipc: Resetting bearer [ 90.580384][ T8500] tipc: Disabling bearer [ 90.854708][ T8511] bpf: Bad value for 'uid' [ 90.923606][ T8518] __nla_validate_parse: 24 callbacks suppressed [ 90.923618][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 91.133309][ T8540] tipc: Enabling of bearer rejected, failed to enable media [ 91.148745][ T8543] pimreg: entered allmulticast mode [ 91.153293][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.156267][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.159846][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.181696][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.185108][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.187937][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.238261][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.242123][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.245006][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 91.384176][ T8476] Set syz1 is full, maxelem 65536 reached [ 91.413900][ T8569] tipc: Enabled bearer , priority 0 [ 91.416474][ T8569] syzkaller0: entered promiscuous mode [ 91.418202][ T8569] syzkaller0: entered allmulticast mode [ 91.429491][ T8569] tipc: Resetting bearer [ 91.432932][ T8568] tipc: Resetting bearer [ 91.438556][ T8568] tipc: Disabling bearer [ 91.608633][ T8589] Set syz1 is full, maxelem 65536 reached [ 91.700555][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 91.836015][ T8618] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.930907][ T8630] tipc: Enabled bearer , priority 0 [ 91.933689][ T8630] syzkaller0: entered promiscuous mode [ 91.935476][ T8630] syzkaller0: entered allmulticast mode [ 91.944548][ T8630] tipc: Resetting bearer [ 91.948173][ T8629] tipc: Resetting bearer [ 91.956705][ T8629] tipc: Disabling bearer [ 92.092084][ T1327] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 92.095465][ T1327] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 92.292450][ T8664] tipc: Enabled bearer , priority 0 [ 92.295007][ T8664] syzkaller0: entered promiscuous mode [ 92.296788][ T8664] syzkaller0: entered allmulticast mode [ 92.308212][ T8664] tipc: Resetting bearer [ 92.312716][ T8663] tipc: Resetting bearer [ 92.323432][ T8663] tipc: Disabling bearer [ 92.377294][ T8674] lo speed is unknown, defaulting to 1000 [ 92.380059][ T8674] lo speed is unknown, defaulting to 1000 [ 92.640426][ T8705] tipc: Enabling of bearer rejected, failed to enable media [ 92.897532][ T8741] tipc: Enabled bearer , priority 0 [ 92.900433][ T8741] syzkaller0: entered promiscuous mode [ 92.902198][ T8741] syzkaller0: entered allmulticast mode [ 92.913019][ T8741] tipc: Resetting bearer [ 92.916132][ T8740] tipc: Resetting bearer [ 92.922833][ T8740] tipc: Disabling bearer [ 93.140179][ T8775] tipc: Enabling of bearer rejected, failed to enable media [ 93.711960][ T8804] tipc: Enabled bearer , priority 0 [ 93.714544][ T8804] syzkaller0: entered promiscuous mode [ 93.716359][ T8804] syzkaller0: entered allmulticast mode [ 93.728485][ T8803] tipc: Resetting bearer [ 93.737338][ T8803] tipc: Disabling bearer [ 93.994999][ T8830] tipc: Enabled bearer , priority 0 [ 93.997737][ T8830] syzkaller0: entered promiscuous mode [ 93.999560][ T8830] syzkaller0: entered allmulticast mode [ 94.012184][ T8829] tipc: Resetting bearer [ 94.025419][ T8829] tipc: Disabling bearer [ 94.052627][ T8840] pim6reg: entered allmulticast mode [ 94.055858][ T8840] pim6reg: left allmulticast mode [ 94.258447][ T8865] tipc: Enabling of bearer rejected, failed to enable media [ 94.509555][ T8896] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 94.512359][ T8896] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 94.575607][ T8900] netlink: 'syz.1.1129': attribute type 21 has an invalid length. [ 94.635124][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 94.635133][ T40] audit: type=1326 audit(1762429695.370:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.644123][ T40] audit: type=1326 audit(1762429695.370:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.650998][ T40] audit: type=1326 audit(1762429695.370:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.657738][ T40] audit: type=1326 audit(1762429695.370:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.664485][ T40] audit: type=1326 audit(1762429695.370:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.671279][ T40] audit: type=1326 audit(1762429695.370:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.677867][ T40] audit: type=1326 audit(1762429695.370:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.684470][ T40] audit: type=1326 audit(1762429695.370:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.691096][ T40] audit: type=1326 audit(1762429695.370:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 94.697688][ T40] audit: type=1326 audit(1762429695.370:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.1.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 95.372743][ T8951] ip6gre1: entered allmulticast mode [ 95.448935][ T5990] kernel write not supported for file [eventfd] (pid: 5990 comm: kworker/2:3) [ 95.914392][ T9015] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.918092][ T9017] netlink: 'syz.3.1175': attribute type 7 has an invalid length. [ 95.983338][ T9023] [ 95.984279][ T9023] ============================= [ 95.985876][ T9023] WARNING: suspicious RCU usage [ 95.987447][ T9023] syzkaller #0 Not tainted [ 95.990262][ T9023] ----------------------------- [ 95.992816][ T9023] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 95.995657][ T9023] [ 95.995657][ T9023] other info that might help us debug this: [ 95.995657][ T9023] [ 95.998956][ T9023] [ 95.998956][ T9023] rcu_scheduler_active = 2, debug_locks = 1 [ 96.001692][ T9023] 1 lock held by syz.2.1178/9023: [ 96.003280][ T9023] #0: ffffffff8e3c3c60 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x357/0xae0 [ 96.006649][ T9023] [ 96.006649][ T9023] stack backtrace: [ 96.008523][ T9023] CPU: 2 UID: 0 PID: 9023 Comm: syz.2.1178 Not tainted syzkaller #0 PREEMPT(full) [ 96.008536][ T9023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.008543][ T9023] Call Trace: [ 96.008546][ T9023] [ 96.008551][ T9023] dump_stack_lvl+0x16c/0x1f0 [ 96.008566][ T9023] lockdep_rcu_suspicious+0x166/0x260 [ 96.008582][ T9023] get_callchain_entry+0x278/0x3f0 [ 96.008600][ T9023] get_perf_callchain+0x2d6/0x810 [ 96.008616][ T9023] ? __lock_acquire+0x560/0x1c90 [ 96.008630][ T9023] ? __pfx_get_perf_callchain+0x10/0x10 [ 96.008648][ T9023] ? __lock_acquire+0x622/0x1c90 [ 96.008663][ T9023] __bpf_get_stack+0x4f4/0xa10 [ 96.008680][ T9023] ? __pfx___bpf_get_stack+0x10/0x10 [ 96.008699][ T9023] bpf_get_stack+0x32/0x40 [ 96.008714][ T9023] bpf_get_stack_raw_tp+0x1dd/0x280 [ 96.008732][ T9023] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 96.008741][ T9023] bpf_prog_test_run_syscall+0x461/0xae0 [ 96.008753][ T9023] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 96.008764][ T9023] ? fput+0x9b/0xd0 [ 96.008777][ T9023] ? __bpf_prog_get+0x97/0x2a0 [ 96.008791][ T9023] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 96.008801][ T9023] __sys_bpf+0x1035/0x4980 [ 96.008810][ T9023] ? futex_private_hash_put+0x18a/0x300 [ 96.008825][ T9023] ? __pfx___sys_bpf+0x10/0x10 [ 96.008835][ T9023] ? __pfx_futex_wait+0x10/0x10 [ 96.008857][ T9023] ? do_futex+0x122/0x350 [ 96.008877][ T9023] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 96.008892][ T9023] ? xfd_validate_state+0x61/0x180 [ 96.008910][ T9023] __ia32_sys_bpf+0x76/0xe0 [ 96.008921][ T9023] __do_fast_syscall_32+0x7c/0x300 [ 96.008934][ T9023] do_fast_syscall_32+0x32/0x80 [ 96.008946][ T9023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.008959][ T9023] RIP: 0023:0xf706d579 [ 96.008967][ T9023] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 96.008976][ T9023] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 96.008986][ T9023] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800004c0 [ 96.008992][ T9023] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 96.008999][ T9023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.009005][ T9023] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 96.009011][ T9023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.009023][ T9023] VM DIAGNOSIS: 11:48:16 Registers: info registers vcpu 0 CPU#0 RAX=000000000011013f RBX=0000000000000000 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27d97 RDI=ffffffff8bf075c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff90823ad0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097810000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c2720e3 CR3=0000000070811000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000bdcff RBX=0000000000000001 RCX=ffffffff8b5d42a9 RDX=0000000000000000 RSI=ffffffff8da27d97 RDI=ffffffff8bf075c0 RBP=ffffed1003b5a490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dad2480 R14=ffffffff90823ad0 R15=0000000000000000 RIP=ffffffff8b5d2d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097910000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3f804f CR3=0000000068185000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85267f35 RDI=ffffffff9adc2de0 RBP=ffffffff9adc2da0 RSP=ffffc9002137f3e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9adc2da0 R15=ffffffff85267ed0 RIP=ffffffff85267f5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a10000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000070811000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff888044750270 RCX=0000000000000001 RDX=ffff888023224900 RSI=ffffc90000415134 RDI=0000000000000005 RBP=ffff888040be3028 RSP=ffffc900038f7070 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000001 R11=0000000000000001 R12=ffffc90000415100 R13=ffff8880447502cc R14=ffff888044750278 R15=0000000000000001 RIP=ffffffff862f6fbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb09c26f300 ffffffff 00c00000 GS =0000 ffff888097b10000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d6ada3cf40 CR3=0000000047d47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=cebf5ac78f77a750 76684e8382ea3554 cebf5ac78f77a750 76684e8382ea3554 cebf5ac78f77a750 76684e8382ea3554 cebf5ac78f77a750 76684e8382ea3554 ZMM18=2cb1ebe63875f7bc e84bb22b3049fe04 2cb1ebe63875f7bc e84bb22b3049fe04 2cb1ebe63875f7bc e84bb22b3049fe04 2cb1ebe63875f7bc e84bb22b3049fe04 ZMM19=ca06000000000000 0000000000000004 ca06000000000000 0000000000000003 ca06000000000000 0000000000000002 ca06000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030880020f900302 08000f8803040208 0680030680020f80 030808000208000f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff02010000 0408060fffffffff 020100000208060c 0171f20802880405 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800202014bf408 0388020508038000 050380020008000a 0800020800080171 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030000000000005c 0000000c0000000a 00040008000f0010 000a0000000003e6 ZMM25=e84bb22be84bb22b e84bb22be84bb22b e84bb22be84bb22b e84bb22be84bb22b e84bb22be84bb22b e84bb22be84bb22b e84bb22be84bb22b e84bb22be84bb22b ZMM26=3875f7bc3875f7bc 3875f7bc3875f7bc 3875f7bc3875f7bc 3875f7bc3875f7bc 3875f7bc3875f7bc 3875f7bc3875f7bc 3875f7bc3875f7bc 3875f7bc3875f7bc ZMM27=2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 2cb1ebe62cb1ebe6 ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c9060000c9060000 c9060000c9060000 c9060000c9060000 c9060000c9060000 c9060000c9060000 c9060000c9060000 c9060000c9060000 c9060000c9060000