last executing test programs: 18.658906468s ago: executing program 0 (id=669): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000003a80)={0x1078, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x1068, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private2}, @generic="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", @generic="17de308440f8061f989ed3486db9872cd56c7f32196fc57d94e7efd388b6f33cdfd5ab8aa0c3ff18cebfc9b6facad1e7be43365948bc2b52727b5c7816ab75f724d2131753d8c25d957aaf48117dd8215b7c3aab0377e8b456fe4c89322c83f657b70a530d5a073c976303b02aed2c2e"]}]}, 0x1078}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x1c, r6, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x6d}, 0x1, 0x0, 0x0, 0x20040885}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r12 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000004c0)=0xe, 0xc00) connect$bt_l2cap(r12, &(0x7f0000000500)={0x1f, 0x7f, @any, 0x5, 0x1}, 0xe) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @generic={0x0, 0x2}, @eol, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}]}}}}}}}}, 0x0) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "bf3dac4b47efcfbb02dab3b0f1e58b1faf0d6d0809541a53207ad5a32fa9dae338c849c1ffe826b3e555fc021bd14f42b64f2647a3d4cdbbd26745b6414016e9ba0ab4645e07d15b8db3811078b6c4693de644c33c71ce5ec24713c7e6f508e26362cd6dc23af93a53dd99a32080d57075781253374860e4c3ab4690df6262cc789b6618f389dc672553b34b1b686ccd3b783660772479892b5f2d02fa4bcc4104c5c6ac0962c3a63093a434849c6aec2ec77a5316f98cc447e49b0f7c874662615694a7957c9b81014c76945f6de4fd6c21cba53a4d5b238b3ee3648e0aedd28ba8cd3a7770a854f738"}, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) writev(r13, &(0x7f0000001280)=[{&(0x7f0000000080)="fd", 0x4}], 0x1) 17.728381647s ago: executing program 0 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3087, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r5, r4, 0x0) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) r6 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$apparmor_task_exec(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$video4linux(&(0x7f0000001180), 0x7, 0x0) eventfd(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 14.845004949s ago: executing program 0 (id=676): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x891c, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x2802, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigprocmask(0x0, &(0x7f0000000180), 0xffffffffffffffff, 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) inotify_add_watch(r2, 0x0, 0x14000102) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5000000012e89e43816239dc7732963129b3eccc139f9fa137cb1cc052d9286e88a3", @ANYRES32=r4, @ANYBLOB="10002abd3000ffdbdf250600000008000300", @ANYBLOB="322c081ceec26d50d9e896ad470ab0adb5269ef47f798d4ea4cd6186963fdc32f0f772e959edf9e280834731ece1f5eb2c2b9536529ef817fdf22f483015d05e60411739f5fd97cdd40c406909717c6afdc405ea0eeae22fdb03a8b10fe9b5c2334d84312a2e8b019e021def72567b434a67e255ce290d9a2c1ddb4cd188ef7a2140d20e3a111fbb03b5a403fa7741609974ddd748b4c230b96d348622191daabcd8e3529da53d7807449b552385ae792f8d70934aa9f16661a8a84ca628ab5799a9171f16bfdf3b0fd2960fc939e34b94", @ANYRESOCT=0x0], 0x50}, 0x1, 0x0, 0x0, 0x400c001}, 0x4010) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000001c0)=0x11) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x2020}, {r6, 0x184}, {0xffffffffffffffff, 0x71e6}, {0xffffffffffffffff, 0x2017}, {0xffffffffffffffff, 0x5350}, {r5, 0x2461}], 0x6, &(0x7f0000000380), &(0x7f0000000280)={[0x8]}, 0x8) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 14.280143179s ago: executing program 0 (id=677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)}, 0x4) 13.780167851s ago: executing program 0 (id=682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x6ff, 0xc0000) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7}) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x0, r6}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r9], 0x3c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.318604498s ago: executing program 1 (id=702): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0x1}, 0xe) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x2, 0x7fffffffffffffff, 0xfffffffffffffed0, &(0x7f00000016c0)=""/245}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e0ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x15) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000600)={0x0, "09bb1a54d761b4e215cae680c4fa8390"}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000017c0)={r3, "6b719cdde01811e16ff1885bbe70c435"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [{0x861, 0x0, 0x8000}, {0xa1d, 0x0, 0x19ce}, {0x6c0, 0x0, 0xfffffffffffffff9}]}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) open(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x20, 0xfffffffa}, 0x14) shutdown(r4, 0x1) 6.227471547s ago: executing program 2 (id=703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffc5ffb7000000330000009560207a285f82086e4db9cae8bdd969240c9ce2157e803d8d09890f70e524da201af98b40a873b57027e312d0922769dbb1b6b4f5fd8d64ce63900540141b9c0d3ae7cee36b5b79c939e83b27aea2be199aa3b1c8d75e1c301c2dc07274eff11a2ddaa88f26bc11d898d549f48c32f3bd09000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @val=@tcx}, 0x40) r7 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100970000003e4effbd5bddb7a25a0bff07c10e"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000300)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r8, &(0x7f0000000140)="11", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0xd) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)}], 0x3, &(0x7f0000000a40)=""/4096, 0x1000}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04330affffffffffff030000007f2f67d144dd0180ceb22298cab50fde81a652a3a90bca7231ca0a846865eb0fd942218ce3f51aafd5d52a5d1283a1826e75761af25e8de549fdc7a7234ea674a81c688f75509fea7ae7dddd9f954264802dfa8c4882a291fc6a73ac13b4dd115c7cac2a0244207b0dccf89427c701e7f0bf8b332e621de32ccce7feb36dd07f9d56454c10018d69743b3919645af57c0aac51e148437948217e44"], 0xd) 5.488622072s ago: executing program 1 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_socket_connect_nvme_tcp() socketpair(0x23, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000815) accept4$packet(0xffffffffffffffff, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001d00)=0x14, 0x40400) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x1, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x10981, 0x1c4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x2010, r2, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 4.968520374s ago: executing program 2 (id=708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffc5ffb7000000330000009560207a285f82086e4db9cae8bdd969240c9ce2157e803d8d09890f70e524da201af98b40a873b57027e312d0922769dbb1b6b4f5fd8d64ce63900540141b9c0d3ae7cee36b5b79c939e83b27aea2be199aa3b1c8d75e1c301c2dc07274eff11a2ddaa88f26bc11d898d549f48c32f3bd09000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @val=@tcx}, 0x40) r7 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100970000003e4effbd5bddb7a25a0bff07c10e"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000300)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r8, &(0x7f0000000140)="11", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB], 0xd) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)}], 0x3, &(0x7f0000000a40)=""/4096, 0x1000}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04330affffffffffff030000007f2f67d144dd0180ceb22298cab50fde81a652a3a90bca7231ca0a846865eb0fd942218ce3f51aafd5d52a5d1283a1826e75761af25e8de549fdc7a7234ea674a81c688f75509fea7ae7dddd9f954264802dfa8c4882a291fc6a73ac13b4dd115c7cac2a0244207b0dccf89427c701e7f0bf8b332e621de32ccce7feb36dd07f9d56454c10018d69743b3919645af57c0aac"], 0xd) 4.510205188s ago: executing program 1 (id=710): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = io_uring_setup(0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2c, 0x2, 0x0, "ffffffffffffffff7ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac1b5"}) r4 = dup(r2) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x58, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x6, @inherit={0x78, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000600000000000000060000000000000001000000000000001800000002000000070000000000000003000000000000006c00000000000000080000000000001075000000000000000100000001000000050027cb365b57b473c2b500000000000000000000000000802855a61a000000"]}, @subvolid=0x3}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0xfffffff7) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000023c0)={0x2020, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) write$FUSE_IOCTL(r0, &(0x7f0000000180)={0x20, 0x0, r7, {0x2, 0x0, 0x69, 0xfff}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 4.350099797s ago: executing program 1 (id=711): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000100)='./file2\x00') lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000019340)=ANY=[@ANYBLOB="1800000000300000002700001a6554eaa442bd1c90a9cb00222f00002500feff000000009500"/51], &(0x7f0000000000)='syzkaller\x00'}, 0x78) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r2, 0x5605) socket$inet(0x2, 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000019300), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="2e85d88a3798dda0d406865d77e485cd159af87eb38e93ca663691b776e060", 0x1f}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000001980)=""/179, 0xb3) 3.537670341s ago: executing program 3 (id=712): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0xa, 0xffffffffffffffff, &(0x7f0000000040)=0xffa1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(r1, 0x0, 0x0, 0x2004c004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) dup(0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0xb8, 0x7000000, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unshare(0x400) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc008aec1, &(0x7f0000000240)=ANY=[]) r7 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r7, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r7, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.536969809s ago: executing program 2 (id=713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)}, 0x4) 2.906307382s ago: executing program 1 (id=714): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x1d3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007112310000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_getparam(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x0, 0x3) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}, 0x1, 0x3000000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040), 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) 2.602340409s ago: executing program 3 (id=715): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500)) r1 = socket$inet_icmp(0x2, 0x2, 0x1) fadvise64(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa9aaaa86dd6004fa86000087ff000000000000000000005aa184f96c554f6412a4a3"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x1, 0x2, 0xffffffff}, {}, {}, {0x6}]}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x47) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x2, 0x8000, 0x4}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0xb, 0x2) creat(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)=@md5={0x1, "1bc1120b4367acaaba77705abf88d3f9"}, 0x11, 0x0) write$tcp_mem(r2, &(0x7f0000000140)={0x9, 0x20, 0x3ff}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) read$dsp(r3, 0x0, 0x2) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {r5, r6+60000000}}, &(0x7f0000000340)) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x2) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) fcntl$setpipe(r7, 0x4, 0xfffffffffffff000) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1bf22b713532a0aa2ef2"], 0x14}}, 0x40800) 2.312582445s ago: executing program 0 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3087, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r5, r4, 0x0) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$apparmor_task_exec(0xffffff9c, 0x0, 0x2, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$video4linux(&(0x7f0000001180), 0x7, 0x0) eventfd(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 2.194664374s ago: executing program 2 (id=716): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000003a80)={0x1088, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x1078, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private2}, @generic="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", @generic="17de308440f8061f989ed3486db9872cd56c7f32196fc57d94e7efd388b6f33cdfd5ab8aa0c3ff18cebfc9b6facad1e7be43365948bc2b52727b5c7816ab75f724d2131753d8c25d957aaf48117dd8215b7c3aab0377e8b456fe4c89322c83f657b70a530d5a073c976303b02aed2c2e"]}]}, 0x1088}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x1c, r6, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x6d}, 0x1, 0x0, 0x0, 0x20040885}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r12 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000004c0)=0xe, 0xc00) connect$bt_l2cap(r12, &(0x7f0000000500)={0x1f, 0x7f, @any, 0x5, 0x1}, 0xe) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @generic={0x0, 0x2}, @eol, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}]}}}}}}}}, 0x0) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "bf3dac4b47efcfbb02dab3b0f1e58b1faf0d6d0809541a53207ad5a32fa9dae338c849c1ffe826b3e555fc021bd14f42b64f2647a3d4cdbbd26745b6414016e9ba0ab4645e07d15b8db3811078b6c4693de644c33c71ce5ec24713c7e6f508e26362cd6dc23af93a53dd99a32080d57075781253374860e4c3ab4690df6262cc789b6618f389dc672553b34b1b686ccd3b783660772479892b5f2d02fa4bcc4104c5c6ac0962c3a63093a434849c6aec2ec77a5316f98cc447e49b0f7c874662615694a7957c9b81014c76945f6de4fd6c21cba53a4d5b238b3ee3648e0aedd28ba8cd3a7770a854f738"}, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) writev(r13, &(0x7f0000001280)=[{&(0x7f0000000080)="fd", 0x4}], 0x1) 2.110391332s ago: executing program 2 (id=717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) munlock(&(0x7f00009ef000/0x2000)=nil, 0x2000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x19, &(0x7f0000000100)={@local}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x7101}) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.874048492s ago: executing program 2 (id=718): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x2, 0x2, 0x1901, 0x1, 0x1adf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs$userns(0x0, &(0x7f00000002c0)) userfaultfd(0x80001) 1.60827712s ago: executing program 3 (id=719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) init_module(0x0, 0x3f00, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x10, 0x8a}, [@IFLA_WEIGHT={0x8}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x20000800) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x5}, {0x6}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0x9, 0x2) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 370.404064ms ago: executing program 3 (id=720): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = io_uring_setup(0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2c, 0x2, 0x0, "ffffffffffffffff7ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac1b5"}) r4 = dup(r2) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x58, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x6, @inherit={0x78, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000600000000000000060000000000000001000000000000001800000002000000070000000000000003000000000000006c00000000000000080000000000001075000000000000000100000001000000050027cb365b57b473c2b500000000000000000000000000802855a61a000000"]}, @subvolid=0x3}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0xfffffff7) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000023c0)={0x2020, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) write$FUSE_IOCTL(r0, &(0x7f0000000180)={0x20, 0x0, r7, {0x2, 0x0, 0x69, 0xfff}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r10, &(0x7f0000000d80)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 270.074762ms ago: executing program 3 (id=721): r0 = socket$inet6(0xa, 0x3, 0xff) timer_create(0x5, &(0x7f0000000240)={0x0, 0x26, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000400)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) socket(0x0, 0x800000003, 0x0) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x84001, 0x88, 0x35}, 0x18) openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x40000, 0x13b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000100)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59302"]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00%\x00\x00\x00\x00@\b'], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9824f5e84c68c36db2d0efaceeb5cff2c4bd10eeeb75ebb1c8a3a24e0d37b811e2c592e2495f287293d9241fbf9f6779277dc0c54bd1e5ea979813bbe500302305de7c9859da00b5ee20523c9c348a790555b56a73317d060b98010b687a2ac3a1c4930177129107624bbc01723892e6cddc56123c35f551617bb705d3a953705988d9348c65e565aa1d119b3e18bada7cafee11549d68ce2086d9b9ea8687404ca414b753f8bed0b1831044515a78dc8080b71899c26dce3d31650423b049821aa200"/205, @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf256b0000000a000600ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x10) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "18e882d4c0e422bd179024b5a74a984c57505a4ea626d571c9dcc8d2c1"}, 0x28) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r13 = dup(r12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r13, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 179.464967ms ago: executing program 1 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3087, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r5, r4, 0x0) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) r6 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$apparmor_task_exec(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$video4linux(&(0x7f0000001180), 0x7, 0x0) eventfd(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 0s ago: executing program 3 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000003c00)=""/17, &(0x7f0000000240)=0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505000000004"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000001a80)={0xb74, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffe00, 0x70}}}}, [@NL80211_ATTR_IE={0x20a, 0x2a, [@supported_rates={0x1, 0x8, [{0x24}, {0x29}, {0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x4}]}, @cf={0x4, 0x6, {0x5, 0x6, 0xfffd, 0xa8}}, @random_vendor={0xdd, 0x30, "795ff1c9861d7e0e07ec6658bd4229ffdcdfc3dc65ac074cbd2e1c2277dc3bb8d91abccce2a02e3980730b10c2a860b8"}, @perr={0x84, 0xc9, {0x8, 0xd, [{{}, @device_a, 0x40, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x10001, @value=@broadcast, 0x23}, {{}, @broadcast, 0x1f, @void, 0x15}, {{}, @device_b, 0x7, @void, 0x28}, {{}, @device_a, 0x76811b04, @void, 0x30}, {{}, @device_b, 0x6, @void, 0x3}, {{}, @device_a, 0x702, @void, 0x2}, {{}, @device_b, 0x7, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x8}, {{}, @device_b, 0x100, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @device_a, 0x80, @value, 0x33}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x2c}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x84, 0x9}}, @random_vendor={0xdd, 0xda, "bb25fc9b9129ee4107430a0139a2502ea5f1d53cb6df5f6aee78832a86ff3fe562eac67eb7a69809bc5d477ac470d02e82fbd090170c0c510be06d9cbcb57c8a7874230158aeafacd14eae1a3c01b347b4c14c2358195e44395c1173ccbef8f6df33fde0070af495dc9c9249d902bd83dba1f3bcd1f5785dd5be11b2ffef7e6bca9046195b93c859ead8148a61f3c022ab59dfb8595a5f0508ceb4ee8af4e116994d334eb90743b0e498b82c1cd157831b55adbefd8c962a06807012c19ca58aa6254edf246c923ea322369f10d12194f5e94f65e8aa0303eccf"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb2, 0x1f}}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd0, 0x7f, [@dsss={0x3, 0x1, 0x68}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x74, 0x3f}}, @ht={0x2d, 0x1a, {0x80, 0x1, 0x4, 0x0, {0x8, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x7fec, 0x3f}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x52, 0xaf, 0x80}}, @perr={0x84, 0x8f, {0x0, 0x9, [{{0x0, 0x1}, @device_b, 0xc469, @value, 0xd}, {{0x0, 0x1}, @device_b, 0x10001, @value, 0x17}, {{}, @device_b, 0x2, @void, 0x1f}, {{}, @device_b, 0x2, @void, 0x2d}, {{}, @device_a, 0x7f, @void, 0x3d}, {{}, @device_a, 0x2, @void, 0x13}, {{0x0, 0x1}, @device_a, 0x200, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_b, 0x13, @value, 0x1b}, {{}, @broadcast, 0x2, @void, 0x2d}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x443, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x40c, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x95}, @broadcast, @broadcast, @random="8133e04babc4", {0xa, 0x9}}, 0x8, @random=0x2, 0x1a04, @void, @val, @val={0x3, 0x1, 0x64}, @void, @void, @val={0x5, 0x76, {0x5, 0x4d, 0xbf, "e8846a6ac883a652adc7efffdb5c80097564a274923e4a48463841d7a3fc39d1943980240886198b196d4c297adef4d23ba4b0d63cf2ce124d234350236a74fecdc0d734490daf4a1c2dba220dd32ec65a654e993150ea84530c513a330908b9474a9e329582182613e1f5b15171801ab6b335"}}, @val={0x25, 0x3, {0x0, 0xac, 0x20}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x420, 0x0, 0x6, 0x0, {0x223, 0x4, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x67, 0x1}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x40}}, @val={0x76, 0x6, {0x0, 0xf2, 0x32, 0x1f}}, [{0xdd, 0xd6, "54f281ff838d76af9f50186204c50c24eaa8b8d1a141ba2adacfda1edfe5c15c0b26455013e5b38899d087e34a82ed9771af95ae8e2ccdff2bbd38463587366cf2b7e180ca4f4c4c467f23ea504a841ea46ca784969b17cb3ab2b123da87973afb930d7ed7f4a69fcdfd2849622a4252db1204d0112ebe8253d1900c78e1a0d5b0c9e12b62d3a7dec1f125f545e447b5ec394e736be53f9458b1d604f57abc4f08d42d0aa61b312c69be0fec01e1d30fca00814490582003ce56a5d3dcb4466efccec67c7b0b74da49f5beebe966acf4f37d29ada90b"}, {0xdd, 0x57, "ffef1d2dd4c2e69b0f2d113caa504dd45483ca37f5be8a955d08abf226a4a1a57cccffd89e1b275ac38807d2593f73895f663c554296c790c4ee17f7aca1a131791ef7dd7295e1ed321435b40e15af29663cd1e935d128"}, {0xdd, 0x43, "51f27ff2e731f41b857a6a4b5038510de9a1a066ea3518cff3992debda5026e09eaee10b260b2d561682f8ea64b12a9374cd2746fffbfc2cb9591796968ba42046ae4d"}, {0xdd, 0xfc, "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"}, {0xdd, 0x38, "b28395fd403d6118842316cfdc5ddcd54ee8976e89ac543a8735f8c22b3061f14fe36333b2f65e9e338797878c382a4ed9d050413000df69"}, {0xdd, 0x82, "596540f26c4e787eb16cd9341a24040e5795b5c86438e3784323f7df7ed2ffb99edeac2cc0ba69519b77ddc01a70efb2f94d67548d77505230d9a488d9ca080e311b7ce440aa9368821a18ace9ebb35b16c29e6f51431aa1bdea7fa98ee1002720be1c880ee45786fdb1c70ebc36b2b47b39dbaf0bfedbfe124f5e717bdfa3e6fb1e"}]}}, @NL80211_ATTR_IE={0x26, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0x20, 0x12, 0x9}}, @mic={0x8c, 0x18, {0xf1c, "0aa3fea91b2a", @long="7859aa14ae53c7210c62a3c2c275d58d"}}]}]}, 0xb74}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) r10 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r10, 0x10d, 0xa, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): filter on device batadv0 [ 62.293830][ T5348] veth1_vlan: entered promiscuous mode [ 62.347564][ T5345] veth0_vlan: entered promiscuous mode [ 62.369663][ T5348] veth0_macvtap: entered promiscuous mode [ 62.385638][ T5345] veth1_vlan: entered promiscuous mode [ 62.405661][ T5348] veth1_macvtap: entered promiscuous mode [ 62.419448][ T5346] veth0_vlan: entered promiscuous mode [ 62.430355][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.442709][ T5346] veth1_vlan: entered promiscuous mode [ 62.466977][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.475969][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.494645][ T5348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.498384][ T5348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.501965][ T5348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.505995][ T5348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.553226][ T5350] Bluetooth: hci1: command tx timeout [ 62.563817][ T5346] veth0_macvtap: entered promiscuous mode [ 62.570445][ T5345] veth0_macvtap: entered promiscuous mode [ 62.609705][ T5346] veth1_macvtap: entered promiscuous mode [ 62.616467][ T5345] veth1_macvtap: entered promiscuous mode [ 62.633334][ T5350] Bluetooth: hci2: command tx timeout [ 62.634280][ T5359] veth0_vlan: entered promiscuous mode [ 62.635661][ T5350] Bluetooth: hci0: command tx timeout [ 62.685388][ T5359] veth1_vlan: entered promiscuous mode [ 62.693107][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.697619][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.699643][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.705977][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.711468][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.713979][ T5350] Bluetooth: hci3: command tx timeout [ 62.723622][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.728237][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.732577][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.737439][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.743960][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.755505][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.759319][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.764858][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.789389][ T5345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.789471][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.792617][ T5345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.796246][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.803683][ T5345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.807124][ T5345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.816889][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.821458][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.827743][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.831982][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.839786][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.858759][ T5346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.862686][ T5346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.866793][ T5346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.870478][ T5346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.881319][ T5359] veth0_macvtap: entered promiscuous mode [ 62.901922][ T5359] veth1_macvtap: entered promiscuous mode [ 62.980043][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.980626][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.990368][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.993966][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.998130][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.002551][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.008534][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.012873][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.019236][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.053491][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.056777][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.076251][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.080922][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.088137][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.092726][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.103203][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.116189][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.124733][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.135342][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.138712][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.155336][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.155825][ T5359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.158657][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.162001][ T5359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.162026][ T5359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.174642][ T5359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.340476][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.352681][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.419500][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.443092][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.471266][ T5415] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.744327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.907525][ T5415] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 63.988058][ T5420] ALSA: mixer_oss: invalid OSS volume '' [ 63.992794][ T5420] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 64.039139][ T39] audit: type=1326 audit(1724520882.470:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.3.4" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fe579 code=0x0 [ 64.415017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 64.427238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.538227][ T5429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.573549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.602165][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 64.633212][ T5350] Bluetooth: hci1: command tx timeout [ 64.719168][ T5350] Bluetooth: hci0: command tx timeout [ 64.723511][ T5350] Bluetooth: hci2: command tx timeout [ 64.803242][ T5350] Bluetooth: hci3: command tx timeout [ 64.959401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.847801][ T39] audit: type=1326 audit(1724520884.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5440 comm="syz.1.9" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 66.632049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 66.643612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 66.701432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.714103][ T5350] Bluetooth: hci1: command tx timeout [ 66.794493][ T5350] Bluetooth: hci2: command tx timeout [ 66.796735][ T5350] Bluetooth: hci0: command tx timeout [ 66.873226][ T5350] Bluetooth: hci3: command tx timeout [ 66.909597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.007351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.257520][ T5455] mkiss: ax0: crc mode is auto. [ 67.524163][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.703201][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 67.715012][ T30] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 67.718976][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.737286][ T30] usb 5-1: config 0 descriptor?? [ 68.159339][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 68.714173][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.893094][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 68.899135][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.904742][ T59] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.909285][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.933804][ T59] usb 6-1: config 0 descriptor?? [ 69.176922][ T59] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 69.996347][ T59] usb 6-1: USB disconnect, device number 2 [ 70.020838][ T59] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 70.375438][ T5487] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.629010][ T30] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 70.633955][ T30] asix 5-1:0.0: probe with driver asix failed with error -71 [ 70.640058][ T30] usb 5-1: USB disconnect, device number 2 [ 71.061502][ T5498] overlayfs: failed to resolve './file0': -2 [ 71.318356][ T5503] binder: BINDER_SET_CONTEXT_MGR already set [ 71.326469][ T5503] binder: 5502:5503 ioctl 40046207 0 returned -16 [ 71.418832][ T5503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.422706][ T5503] IPv6: NLM_F_CREATE should be set when creating new route [ 71.425499][ T5503] IPv6: NLM_F_CREATE should be set when creating new route [ 71.826354][ T5510] tmpfs: Bad value for 'mpol' [ 72.108296][ T5515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.300229][ T5405] IPVS: starting estimator thread 0... [ 72.433890][ T5521] IPVS: using max 20 ests per chain, 48000 per kthread [ 72.591864][ T5524] Bluetooth: MGMT ver 1.23 [ 72.715062][ T5526] mmap: syz.2.28 (5526) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.097265][ T5528] nbd2: detected capacity change from 0 to 22 [ 73.107915][ T5534] block nbd2: shutting down sockets [ 73.189521][ T71] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.194049][ T71] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.210800][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.233373][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.237268][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.241302][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.245849][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.249702][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.252831][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.258488][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.262254][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.289400][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.294534][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 73.301498][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.335957][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.339134][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.342627][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.348195][ T5347] ldm_validate_partition_table(): Disk read failed. [ 73.351667][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.359505][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.362858][ T5347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.368786][ T5347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 73.375555][ T5347] Dev nbd2: unable to read RDB block 0 [ 73.379407][ T5347] nbd2: unable to read partition table [ 73.384024][ T5347] nbd2: partition table beyond EOD, truncated [ 73.401047][ T5347] ldm_validate_partition_table(): Disk read failed. [ 73.407232][ T5347] Dev nbd2: unable to read RDB block 0 [ 73.416902][ T5347] nbd2: unable to read partition table [ 73.420607][ T5347] nbd2: partition table beyond EOD, truncated [ 73.803526][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 73.923538][ T5542] openvswitch: netlink: Message has 8 unknown bytes. [ 74.093125][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.224312][ T5545] fuse: Bad value for 'rootmode' [ 74.288916][ T59] usb 6-1: config index 0 descriptor too short (expected 9533, got 36) [ 74.293470][ T59] usb 6-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 74.297971][ T59] usb 6-1: config 161 has an invalid interface descriptor of length 7, skipping [ 74.302385][ T59] usb 6-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 74.310455][ T59] usb 6-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 74.319113][ T59] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 74.323235][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.446818][ T5548] netlink: 'syz.3.33': attribute type 11 has an invalid length. [ 74.560044][ T5405] usb 6-1: USB disconnect, device number 3 [ 74.886556][ T5555] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.359245][ T5561] overlayfs: failed to resolve './file0': -2 [ 75.475162][ T835] IPVS: starting estimator thread 0... [ 75.567070][ T5565] IPVS: using max 35 ests per chain, 84000 per kthread [ 76.056630][ T39] audit: type=1326 audit(1724520894.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.39" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 76.262537][ T5574] netlink: 'syz.1.41': attribute type 4 has an invalid length. [ 76.298149][ T5574] netlink: 'syz.1.41': attribute type 4 has an invalid length. [ 76.554321][ T5350] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 76.558689][ T5350] Bluetooth: hci0: Injecting HCI hardware error event [ 76.561254][ T5350] Bluetooth: hci0: hardware error 0x00 [ 76.801084][ C3] Illegal XDP return value 16128 on prog (id 21) dev bond_slave_1, expect packet loss! [ 76.828933][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.837337][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.993102][ T39] audit: type=1326 audit(1724520896.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5602 comm="syz.1.47" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 78.069545][ T5609] overlayfs: failed to resolve './file0': -2 [ 78.643249][ T5350] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 78.744920][ T5614] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 78.817059][ T5614] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 78.838058][ T39] audit: type=1326 audit(1724520897.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.0.58" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 78.932797][ T5614] Zero length message leads to an empty skb [ 78.943429][ T39] audit: type=1400 audit(1724520897.370:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 79.131657][ T5619] netlink: 'syz.1.49': attribute type 11 has an invalid length. [ 79.765047][ T5632] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 79.775666][ T5632] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 79.783163][ T5350] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 79.809562][ T5634] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 79.817162][ T5634] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 79.928739][ T5640] siw: device registration error -23 [ 79.957280][ T5632] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.984756][ T5632] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.096780][ T5641] [U]  [ 81.523800][ T5658] tmpfs: Bad value for 'mpol' [ 81.693184][ T5105] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.873385][ T5105] usb 7-1: Using ep0 maxpacket: 32 [ 81.960475][ T5105] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.983604][ T5105] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.002077][ T5105] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.007401][ T5105] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 82.013726][ T5105] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.019783][ T5105] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.027238][ T5105] usb 7-1: Product: syz [ 82.029787][ T5105] usb 7-1: Manufacturer: syz [ 82.037002][ T5105] usb 7-1: SerialNumber: syz [ 82.390950][ T5666] IPv6: addrconf: prefix option has invalid lifetime [ 82.433368][ T5105] cdc_ncm 7-1:1.0: bind() failure [ 82.439136][ T5105] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 82.449165][ T5105] cdc_ncm 7-1:1.1: bind() failure [ 82.456846][ T5105] usb 7-1: USB disconnect, device number 2 [ 84.306643][ T39] audit: type=1326 audit(1724520902.730:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.68" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x0 [ 85.092043][ T5694] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 85.099349][ T5694] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 85.282216][ T5694] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.578054][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 86.528739][ T5721] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 86.536641][ T5721] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 86.647496][ T5721] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.953155][ T5350] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 87.048839][ T985] cfg80211: failed to load regulatory.db [ 87.304447][ T5737] nbd3: detected capacity change from 0 to 22 [ 87.331344][ T5738] block nbd3: shutting down sockets [ 87.342193][ C2] blk_print_req_error: 25 callbacks suppressed [ 87.342211][ C2] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.349044][ C2] buffer_io_error: 25 callbacks suppressed [ 87.349056][ C2] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.355581][ T833] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.359660][ T833] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.363100][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.366621][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.369777][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.373379][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.376743][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.381858][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.389061][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.393275][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.397498][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.401211][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.404346][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.407710][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.413283][ T5347] ldm_validate_partition_table(): Disk read failed. [ 87.416656][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.420682][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.425000][ T5347] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.428944][ T5347] Buffer I/O error on dev nbd3, logical block 0, async page read [ 87.432683][ T5347] Dev nbd3: unable to read RDB block 0 [ 87.436873][ T5347] nbd3: unable to read partition table [ 87.439641][ T5347] nbd3: partition table beyond EOD, truncated [ 87.446860][ T5347] ldm_validate_partition_table(): Disk read failed. [ 87.449890][ T5347] Dev nbd3: unable to read RDB block 0 [ 87.452317][ T5347] nbd3: unable to read partition table [ 87.456685][ T5347] nbd3: partition table beyond EOD, truncated [ 87.678539][ T39] audit: type=1326 audit(1724520906.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5740 comm="syz.2.83" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x0 [ 88.176652][ T39] audit: type=1326 audit(1724520906.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.3.88" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 88.824259][ T5764] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 88.828782][ T5764] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 88.982649][ T5766] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.039592][ T39] audit: type=1326 audit(1724520907.470:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.0.99" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 89.602494][ T5350] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 89.906739][ T5786] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 89.911377][ T5786] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 90.067453][ T5786] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.113810][ T5784] netlink: 'syz.2.94': attribute type 11 has an invalid length. [ 90.703074][ T5389] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 90.923209][ T5389] usb 6-1: Using ep0 maxpacket: 8 [ 90.931961][ T5389] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 90.939088][ T5389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.967747][ T5389] usb 6-1: config 0 descriptor?? [ 91.857025][ T5809] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 91.865783][ T5809] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 91.984255][ T5809] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.190453][ T5350] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 93.343240][ T5835] mkiss: ax0: crc mode is auto. [ 94.004370][ T5839] fuse: Bad value for 'rootmode' [ 94.557106][ T5389] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 94.561799][ T5389] asix 6-1:0.0: probe with driver asix failed with error -71 [ 94.587999][ T5389] usb 6-1: USB disconnect, device number 4 [ 94.963185][ T5350] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 94.967476][ T5350] Bluetooth: hci3: Injecting HCI hardware error event [ 94.971993][ T5350] Bluetooth: hci3: hardware error 0x00 [ 96.087843][ T5860] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 96.096279][ T5860] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 96.222850][ T5860] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.465982][ T5855] [U]  [ 96.807654][ T39] audit: type=1326 audit(1724520915.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.0.117" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 97.043146][ T5350] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 97.403237][ T39] audit: type=1326 audit(1724520915.830:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5886 comm="syz.3.120" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 98.047933][ T5350] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 98.689971][ T5911] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 98.720721][ T5911] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 98.896891][ T5911] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.932463][ T39] audit: type=1326 audit(1724520918.360:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.129" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x0 [ 100.198722][ T5917] [U]  [ 100.805352][ T39] audit: type=1326 audit(1724520919.240:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.0.131" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 101.257840][ T39] audit: type=1326 audit(1724520919.690:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.1.133" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 102.300111][ T5350] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 102.668313][ T39] audit: type=1326 audit(1724520921.100:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.0.140" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 102.740414][ T5973] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 102.747276][ T5973] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 102.862119][ T5973] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.696339][ T5988] unsupported nlmsg_type 40 [ 104.056447][ T39] audit: type=1326 audit(1724520922.490:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.1.146" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 104.718459][ T39] audit: type=1326 audit(1724520923.150:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.150" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 112.183573][ T4770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.188754][ T4770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.197648][ T4770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.202146][ T4770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.220933][ T4770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.233247][ T4770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.558007][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 112.568633][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 112.915573][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 113.133499][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.154098][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.157328][ T6023] bridge_slave_0: entered allmulticast mode [ 113.160330][ T6023] bridge_slave_0: entered promiscuous mode [ 113.166593][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.169909][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.173485][ T6023] bridge_slave_1: entered allmulticast mode [ 113.177807][ T6023] bridge_slave_1: entered promiscuous mode [ 113.370191][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.396188][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.488936][ C2] vkms_vblank_simulate: vblank timer overrun [ 113.615953][ T6023] team0: Port device team_slave_0 added [ 113.632066][ T6023] team0: Port device team_slave_1 added [ 113.790289][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.804626][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.828046][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.838322][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.842308][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.873037][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.897286][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 114.218399][ T6023] hsr_slave_0: entered promiscuous mode [ 114.239120][ T6023] hsr_slave_1: entered promiscuous mode [ 114.242939][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.247428][ T6023] Cannot create hsr debugfs directory [ 114.323449][ T4770] Bluetooth: hci4: command tx timeout [ 114.648903][ T6023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.788348][ T6071] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 114.791154][ T6023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.892763][ T6023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.021378][ T6023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.320774][ T6023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.329564][ T6023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.342556][ T6023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.373161][ T6023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.553664][ T6085] ALSA: mixer_oss: invalid OSS volume '' [ 115.596805][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.618909][ T39] audit: type=1326 audit(1724520934.050:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.167" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fe579 code=0x0 [ 115.643775][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.663950][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.667808][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.684087][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.687257][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.041015][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.106623][ T6023] veth0_vlan: entered promiscuous mode [ 116.127120][ T6023] veth1_vlan: entered promiscuous mode [ 116.248468][ T6023] veth0_macvtap: entered promiscuous mode [ 116.258769][ T6023] veth1_macvtap: entered promiscuous mode [ 116.275880][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.281206][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.293832][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.299643][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.308800][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.315744][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.320771][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.325608][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.334405][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.356930][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.361547][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.366856][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.373483][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.379206][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.388317][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.392494][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.397328][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.403139][ T4770] Bluetooth: hci4: command tx timeout [ 116.403872][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.438897][ T6023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.442646][ T6023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.447098][ T6023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.451109][ T6023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.555123][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.558924][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.566372][ T39] audit: type=1804 audit(1724520935.000:21): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.169" name="/newroot/46/file0" dev="fuse" ino=1 res=1 errno=0 [ 116.587100][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.590195][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.908863][ T6105] [U]  [ 118.017893][ T6119] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 118.025988][ T6119] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 118.186470][ T6119] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.483154][ T4770] Bluetooth: hci4: command tx timeout [ 118.963307][ T834] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.136776][ T39] audit: type=1326 audit(1724520937.520:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.178" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 119.163224][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 119.168692][ T834] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 119.182891][ T834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.192704][ T834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.213344][ T834] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.223231][ T834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.239041][ T834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.242941][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.576008][ T834] usb 6-1: usb_control_msg returned -32 [ 119.583630][ T834] usbtmc 6-1:16.0: can't read capabilities [ 119.613805][ T834] usb 6-1: USB disconnect, device number 5 [ 119.813718][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 120.553103][ T4770] Bluetooth: hci4: command tx timeout [ 121.199075][ T39] audit: type=1326 audit(1724520939.630:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.3.182" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 122.220575][ T6162] [U]  [ 122.249526][ T4770] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 122.405627][ T6176] tipc: Can't bind to reserved service type 1 [ 123.307181][ T39] audit: type=1326 audit(1724520941.710:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.189" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 124.375935][ T4770] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 124.418854][ T4770] Bluetooth: hci4: unexpected event 0x34 length: 10 > 6 [ 124.424522][ T6189] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.191'. [ 124.516415][ T6199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.703916][ T39] audit: type=1326 audit(1724520943.140:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.3.192" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 125.131347][ T39] audit: type=1326 audit(1724520943.560:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.194" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 125.476163][ T4770] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 126.125188][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 126.383731][ T6220] nbd1: detected capacity change from 0 to 22 [ 126.408430][ T6234] block nbd1: shutting down sockets [ 126.414654][ C1] blk_print_req_error: 25 callbacks suppressed [ 126.414668][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.421055][ C1] buffer_io_error: 25 callbacks suppressed [ 126.421065][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.427441][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.431027][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.441577][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.453300][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.457617][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.461832][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.491715][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.503072][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.506929][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.517353][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.521230][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.525682][ T6232] mkiss: ax0: crc mode is auto. [ 126.528773][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.533488][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.537006][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.555045][ T6028] ldm_validate_partition_table(): Disk read failed. [ 126.557981][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.567803][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.570878][ T6028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.579590][ T6028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 126.585334][ T6028] Dev nbd1: unable to read RDB block 0 [ 126.587794][ T6028] nbd1: unable to read partition table [ 126.590774][ T6028] nbd1: partition table beyond EOD, truncated [ 126.603724][ T6028] ldm_validate_partition_table(): Disk read failed. [ 126.611067][ T6028] Dev nbd1: unable to read RDB block 0 [ 126.621335][ T6028] nbd1: unable to read partition table [ 126.627420][ T6028] nbd1: partition table beyond EOD, truncated [ 128.369316][ T39] audit: type=1326 audit(1724520946.800:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.384114][ T39] audit: type=1326 audit(1724520946.800:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.391428][ T39] audit: type=1326 audit(1724520946.800:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.410893][ T39] audit: type=1326 audit(1724520946.800:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.424070][ T39] audit: type=1326 audit(1724520946.810:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.439137][ T39] audit: type=1326 audit(1724520946.810:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.450938][ T39] audit: type=1326 audit(1724520946.810:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.467424][ T39] audit: type=1326 audit(1724520946.810:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.483401][ T39] audit: type=1326 audit(1724520946.810:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 128.501280][ T39] audit: type=1326 audit(1724520946.810:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.1.206" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7fc00000 [ 129.100129][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 130.166713][ T6274] [U]  [ 130.256324][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 130.652181][ T6301] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.162455][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 132.885064][ T6332] nbd0: detected capacity change from 0 to 22 [ 132.904279][ T6333] block nbd0: shutting down sockets [ 132.919167][ T52] blk_print_req_error: 25 callbacks suppressed [ 132.919182][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.929463][ T52] buffer_io_error: 25 callbacks suppressed [ 132.929474][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.935619][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.940558][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.964506][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.973304][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.976725][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.980510][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.986432][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.990706][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.995226][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.998868][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.002277][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.007551][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.011168][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.015639][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.019062][ T6027] ldm_validate_partition_table(): Disk read failed. [ 133.022130][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.027022][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.032037][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.040598][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 133.045251][ T6027] Dev nbd0: unable to read RDB block 0 [ 133.047809][ T6027] nbd0: unable to read partition table [ 133.050835][ T6027] nbd0: partition table beyond EOD, truncated [ 133.062764][ T6027] ldm_validate_partition_table(): Disk read failed. [ 133.067430][ T6027] Dev nbd0: unable to read RDB block 0 [ 133.070119][ T6027] nbd0: unable to read partition table [ 133.072914][ T6027] nbd0: partition table beyond EOD, truncated [ 133.176265][ T6326] [U]  [ 133.394393][ T39] kauditd_printk_skb: 667 callbacks suppressed [ 133.394403][ T39] audit: type=1326 audit(1724520951.830:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.3.222" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 133.789000][ T6345] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.072500][ T6361] [U]  [ 136.905635][ T6375] [U]  [ 137.323114][ T6390] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 137.579331][ T6402] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 137.584613][ T6402] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 137.709236][ T6402] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 137.791526][ T5350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.797399][ T5350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.811663][ T5350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.825211][ T5350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.844864][ T5350] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.858088][ T5350] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.119825][ T6408] chnl_net:caif_netlink_parms(): no params data found [ 138.237881][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.242746][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.386633][ T6408] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.396334][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.403161][ T6408] bridge_slave_0: entered allmulticast mode [ 138.415322][ T6408] bridge_slave_0: entered promiscuous mode [ 138.425779][ T6408] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.437034][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.443339][ T6408] bridge_slave_1: entered allmulticast mode [ 138.452652][ T6408] bridge_slave_1: entered promiscuous mode [ 138.673795][ T6408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.681751][ T6408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.798692][ T6408] team0: Port device team_slave_0 added [ 138.809664][ T6408] team0: Port device team_slave_1 added [ 138.912136][ T6408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.918496][ T6408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.934676][ T6408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.940977][ T6408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.946540][ T6408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.962398][ T6408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.077386][ T6414] [U]  [ 139.090167][ T6408] hsr_slave_0: entered promiscuous mode [ 139.093714][ T6408] hsr_slave_1: entered promiscuous mode [ 139.098883][ T6408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.102801][ T6408] Cannot create hsr debugfs directory [ 139.324505][ T6408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.409004][ T6408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.554328][ T6408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.657853][ T6408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.778437][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 139.847760][ T6408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.859247][ T6408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.882741][ T6408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.891314][ T6408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.952406][ T6438] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.003312][ T4770] Bluetooth: hci5: command tx timeout [ 140.017681][ T6408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.042387][ T6408] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.095028][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.097974][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.120318][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.123852][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.419846][ T6408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.486240][ T6408] veth0_vlan: entered promiscuous mode [ 140.498707][ T6408] veth1_vlan: entered promiscuous mode [ 140.531753][ T6408] veth0_macvtap: entered promiscuous mode [ 140.539006][ T6408] veth1_macvtap: entered promiscuous mode [ 140.555712][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.560151][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.565964][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.570255][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.574626][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.579037][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.583300][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.587607][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.591660][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.596048][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.601833][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.614218][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.618589][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.622687][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.628009][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.632121][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.637749][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.641524][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.646021][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.650129][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.654512][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.660934][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.668981][ T6408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.672665][ T6408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.676823][ T6408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.680461][ T6408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.747154][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.754741][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.777785][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.781338][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.113987][ T6454] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 141.118373][ T6454] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 141.308304][ T6454] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.084684][ T4770] Bluetooth: hci5: command tx timeout [ 142.861096][ T6469] [U]  [ 143.022206][ T6478] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.795623][ T6494] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 143.800375][ T6494] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 143.881759][ T6494] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.013719][ T6497] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 144.018495][ T6497] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 144.153557][ T4770] Bluetooth: hci5: command tx timeout [ 144.223509][ T6497] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.419065][ T6508] [U]  [ 145.662379][ T39] audit: type=1326 audit(1724520964.090:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.266" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 146.233284][ T4770] Bluetooth: hci5: command tx timeout [ 146.632022][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 146.742570][ T6536] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 146.750711][ T6536] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 146.854067][ T6536] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.453500][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 147.861936][ T6540] [U]  [ 150.711305][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 151.564159][ T6582] [U]  [ 155.600820][ T6626] [U]  [ 157.284648][ T39] audit: type=1326 audit(1724520975.710:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.305" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 157.628848][ T6658] capability: warning: `syz.2.305' uses deprecated v2 capabilities in a way that may be insecure [ 159.962952][ T6669] [U]  [ 160.044832][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 161.266596][ T6680] [U]  [ 162.755984][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 162.776782][ T6716] mkiss: ax0: crc mode is auto. [ 163.226427][ T6711] [U]  [ 163.324323][ T6734] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 164.037274][ T6752] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 164.455285][ T6744] [U]  [ 165.662804][ T6760] [U]  [ 166.065349][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 166.899811][ T6788] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.961468][ T6796] siw: device registration error -23 [ 168.496736][ T6809] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 168.792251][ T6815] No source specified [ 168.899050][ T39] audit: type=1804 audit(1724520987.330:707): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.350" name="/newroot/94/bus/file0" dev="overlay" ino=528 res=1 errno=0 [ 169.093750][ T6824] Process accounting resumed [ 169.188640][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 170.008568][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 170.455932][ T6843] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.179717][ T6857] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.280066][ T6867] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.563425][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.753839][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 171.768547][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.772954][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.808690][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.823342][ T35] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 171.827413][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.832895][ T35] usb 5-1: config 0 descriptor?? [ 172.288026][ T35] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 172.292723][ T35] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 172.297658][ T35] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 172.306185][ T35] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 172.309560][ T35] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 172.331695][ T35] ntrig 0003:1B96:000A.0002: hidraw1: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 172.620704][ T35] usb 5-1: USB disconnect, device number 3 [ 173.836855][ T6879] [U]  [ 174.046434][ T6887] kernel profiling enabled (shift: 9) [ 174.080627][ T6887] overlayfs: failed to resolve './file0/file0': -13 [ 174.325074][ T6902] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.361'. [ 174.346058][ T6892] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.643323][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 175.975562][ T6928] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.394955][ T6935] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.043249][ T6963] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 179.220448][ T6974] [U]  [ 179.463138][ T1418] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.656575][ T1418] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 179.661221][ T1418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.689574][ T1418] usb 5-1: config 0 descriptor?? [ 179.730963][ T1418] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 180.529705][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.538858][ T1418] usb 5-1: USB disconnect, device number 4 [ 180.819859][ T7004] overlay: ./file0 is not a directory [ 180.854238][ T7004] process 'syz.1.391' launched './file0' with NULL argv: empty string added [ 181.099867][ T39] audit: type=1326 audit(1724520999.520:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.2.392" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 181.271135][ T7008] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 181.276802][ T5352] Bluetooth: hci2: command 0x0406 tx timeout [ 181.276833][ T5354] Bluetooth: hci1: command 0x0406 tx timeout [ 181.961189][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 182.834275][ T7019] [U]  [ 183.429460][ T39] audit: type=1326 audit(1724521001.860:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.403" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 183.667294][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 184.211184][ T7056] veth0_to_hsr: entered promiscuous mode [ 184.252784][ T39] audit: type=1326 audit(1724521002.680:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.0.404" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 184.452215][ T7062] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.559955][ T7055] veth0_to_hsr: left promiscuous mode [ 184.948422][ T7074] Invalid ELF section header size [ 185.171497][ T7078] program syz.0.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.428161][ T7080] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 185.960292][ T7075] [U]  [ 186.355100][ T7101] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 187.223865][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 187.251978][ T7125] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.043884][ T7136] [U]  [ 190.457844][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 191.766198][ T7157] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.783631][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 192.591397][ T7175] overlayfs: overlapping lowerdir path [ 193.100620][ T7182] 9pnet_fd: Insufficient options for proto=fd [ 193.655803][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 193.668495][ T39] audit: type=1326 audit(1724521012.100:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.3.438" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 193.857471][ T7178] [U]  [ 194.170206][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 194.179141][ T7201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.189527][ T7201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.210802][ T7201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.216230][ T7201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.794299][ T7207] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.283680][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 195.308445][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 197.544645][ T7238] [U]  [ 198.051398][ T7252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.106719][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 198.110343][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 198.957816][ T39] audit: type=1326 audit(1724521017.390:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.1.453" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 198.995852][ T7260] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 199.000603][ T7260] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 199.137111][ T7260] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.533532][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 199.680357][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.683447][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.736784][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 199.741058][ T25] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 199.745330][ T25] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 199.749058][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.768044][ T25] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 199.772041][ T25] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.777886][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.783566][ T25] usb 7-1: config 0 descriptor?? [ 200.046833][ T25] usb 7-1: USB disconnect, device number 3 [ 200.643209][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 200.878424][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 200.883044][ T25] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.886913][ T25] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.890340][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.913068][ T25] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 200.918411][ T25] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 200.922705][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.929063][ T25] usb 7-1: config 0 descriptor?? [ 201.196541][ T35] usb 7-1: USB disconnect, device number 4 [ 202.302455][ T39] audit: type=1326 audit(1724521020.720:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.1.465" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 203.242212][ T7314] kernel read not supported for file /eth0 (pid: 7314 comm: syz.1.469) [ 203.250485][ T39] audit: type=1800 audit(1724521021.680:714): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.469" name="eth0" dev="mqueue" ino=20579 res=0 errno=0 [ 203.773081][ T5385] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 203.933198][ T7323] binder: BINDER_SET_CONTEXT_MGR already set [ 203.935550][ T7323] binder: 7322:7323 ioctl 4018620d 200001c0 returned -16 [ 203.976594][ T5385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.991196][ T5385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.999087][ T5385] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.008960][ T5385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.066397][ T5385] usb 6-1: config 0 descriptor?? [ 204.914373][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 204.918202][ T7314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.469'. [ 204.932388][ T7314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'. [ 204.963119][ T7314] vlan2: entered allmulticast mode [ 204.968109][ T7314] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 205.120084][ T5385] usbhid 6-1:0.0: can't add hid device: -71 [ 205.122842][ T5385] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 205.135530][ T5385] usb 6-1: USB disconnect, device number 6 [ 206.043613][ T39] audit: type=1326 audit(1724521024.480:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.1.473" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 206.712420][ T39] audit: type=1326 audit(1724521025.130:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.3.477" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 206.927267][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 207.001096][ T7348] libceph: resolve '. [ 207.001096][ T7348] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 207.001096][ T7348] ' (ret=-3): failed [ 208.273089][ T5385] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 208.483104][ T5385] usb 7-1: Using ep0 maxpacket: 8 [ 208.489837][ T5385] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 208.496785][ T5385] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.503920][ T5385] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.508562][ T5385] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.513147][ T5385] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.525520][ T5385] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.530686][ T5385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.794658][ T5385] usb 7-1: usb_control_msg returned -32 [ 208.798347][ T5385] usbtmc 7-1:16.0: can't read capabilities [ 208.806829][ T5385] usb 7-1: USB disconnect, device number 5 [ 209.024549][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 210.858650][ T39] audit: type=1326 audit(1724521029.290:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.1.487" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 211.513217][ T39] audit: type=1326 audit(1724521029.930:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.3.488" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 212.017514][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 212.071212][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 212.702801][ T7409] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.495'. [ 212.718272][ T7409] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 213.763332][ T39] audit: type=1326 audit(1724521032.190:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.3.500" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 214.097422][ T39] audit: type=1326 audit(1724521032.530:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.0.501" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 214.875408][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 215.740211][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 216.064388][ T39] audit: type=1326 audit(1724521034.500:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.3.512" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 216.952599][ T7452] [U]  [ 217.321310][ T39] audit: type=1326 audit(1724521035.760:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.3.515" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 218.258236][ T7487] Process accounting resumed [ 220.240896][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 220.249346][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.253633][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.258940][ T7504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.273073][ T7504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.594430][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 221.025684][ T7512] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 221.031550][ T7512] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 221.202418][ T7512] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 221.727987][ T39] audit: type=1326 audit(1724521040.160:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.1.526" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 222.182319][ T7520] [U]  [ 222.225392][ T7535] overlayfs: missing 'lowerdir' [ 222.705260][ T7538] Process accounting resumed [ 222.947245][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 223.272059][ T7548] kernel read not supported for file /eth0 (pid: 7548 comm: syz.2.531) [ 223.293845][ T39] audit: type=1800 audit(1724521041.730:724): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.531" name="eth0" dev="mqueue" ino=19272 res=0 errno=0 [ 223.823171][ T834] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 224.009338][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.017115][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.021206][ T834] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.028257][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.051905][ T834] usb 7-1: config 0 descriptor?? [ 224.744797][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 224.748896][ T7548] netlink: 48 bytes leftover after parsing attributes in process `syz.2.531'. [ 224.754340][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'. [ 224.773320][ T7548] vlan2: entered allmulticast mode [ 224.775943][ T7548] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 224.820498][ T834] usbhid 7-1:0.0: can't add hid device: -71 [ 224.825229][ T834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 224.831454][ T834] usb 7-1: USB disconnect, device number 6 [ 225.087196][ T7567] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 225.099641][ T7567] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 225.242185][ T7569] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 225.567948][ T7579] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 225.572717][ T7579] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 225.734431][ T7583] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 226.312128][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 227.362030][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 227.571784][ T4770] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 227.635355][ T4770] Bluetooth: hci2: unexpected event 0x34 length: 10 > 6 [ 227.654409][ T7605] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.541'. [ 227.777962][ T7606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.844788][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 228.004167][ T7611] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.012173][ T7611] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.016354][ T7611] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.021554][ T7611] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.462371][ T7617] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 228.467590][ T7617] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 228.584820][ T7617] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 229.290238][ T7627] libceph: resolve '. [ 229.290238][ T7627] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 229.290238][ T7627] ' (ret=-3): failed [ 232.441798][ T7649] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 232.447931][ T7649] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 232.669045][ T7649] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 233.057514][ T7657] overlay: ./file0 is not a directory [ 233.274672][ T7657] overlayfs: failed to resolve './file0': -2 [ 233.420673][ T39] audit: type=1804 audit(1724521051.850:725): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.556" name="/newroot/131/file0/bus/bus/bus" dev="9p" ino=36575551 res=1 errno=0 [ 233.479399][ T7657] syz.1.556 (7657) used greatest stack depth: 19760 bytes left [ 233.754543][ T7671] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.560'. [ 233.795819][ T4770] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 233.808413][ T7667] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.560'. [ 236.094928][ T39] audit: type=1326 audit(1724521054.530:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.3.565" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 237.618810][ T7706] libceph: resolve '. [ 237.618810][ T7706] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 237.618810][ T7706] ' (ret=-3): failed [ 237.796043][ T7706] Restarting kernel threads ... done. [ 238.892795][ T4770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 239.698192][ T7724] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 239.707141][ T7724] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 239.844605][ T7724] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 240.190158][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 240.194055][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.197436][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.205811][ T7730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.218975][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.123937][ T4770] Bluetooth: hci2: unexpected cc 0x2027 length: 2 > 1 [ 242.127828][ T4770] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 242.132103][ T4770] Bluetooth: hci2: unexpected event for opcode 0xe05e [ 242.716215][ T4770] Bluetooth: hci4: command 0x0406 tx timeout [ 242.881473][ T7758] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 242.888358][ T7758] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 242.985829][ T7760] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 243.888706][ T7768] usb usb5: usbfs: process 7768 (syz.2.586) did not claim interface 0 before use [ 244.670899][ T4770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.678385][ T4770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.692103][ T4770] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.705600][ T4770] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.709230][ T4770] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 244.712283][ T4770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.992450][ T7775] chnl_net:caif_netlink_parms(): no params data found [ 245.308569][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.311643][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.318695][ T7775] bridge_slave_0: entered allmulticast mode [ 245.323393][ T7775] bridge_slave_0: entered promiscuous mode [ 245.331151][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.344735][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.358791][ T7792] libceph: resolve '. [ 245.358791][ T7792] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 245.358791][ T7792] ' (ret=-3): failed [ 245.360390][ T7775] bridge_slave_1: entered allmulticast mode [ 245.375205][ T7775] bridge_slave_1: entered promiscuous mode [ 245.567578][ T7775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.626432][ T7775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.767150][ T7775] team0: Port device team_slave_0 added [ 245.775544][ T7775] team0: Port device team_slave_1 added [ 245.945897][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.951009][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.998303][ T7775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.010595][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.015287][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.028447][ T7775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.157113][ T5350] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 246.161926][ T5350] Bluetooth: hci2: Injecting HCI hardware error event [ 246.167795][ T5350] Bluetooth: hci2: hardware error 0x00 [ 246.385581][ T7809] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 246.403350][ T7809] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 246.424724][ T7775] hsr_slave_0: entered promiscuous mode [ 246.432184][ T7775] hsr_slave_1: entered promiscuous mode [ 246.443674][ T7775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.447435][ T7775] Cannot create hsr debugfs directory [ 246.592058][ T7810] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 246.793282][ T4770] Bluetooth: hci6: command tx timeout [ 246.880776][ T7775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.136930][ T7775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.288065][ T7775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.431634][ T7775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.714021][ T7775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.745971][ T7775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.759674][ T7775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.774293][ T7775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.021963][ T7775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.051869][ T7775] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.116566][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.119733][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.158425][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.161674][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.236804][ T5350] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 248.418241][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 248.422254][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.432314][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.448418][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.470868][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.602499][ T7775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.661322][ T7775] veth0_vlan: entered promiscuous mode [ 248.678357][ T7775] veth1_vlan: entered promiscuous mode [ 248.712085][ T7775] veth0_macvtap: entered promiscuous mode [ 248.722136][ T7775] veth1_macvtap: entered promiscuous mode [ 248.741970][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.751471][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.756347][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.760532][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.767044][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.785323][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.793130][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.797118][ T7775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.801501][ T7775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.809446][ T7775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.819156][ T7775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.823978][ T7775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.828373][ T7775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.832116][ T7775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.885054][ T5350] Bluetooth: hci6: command tx timeout [ 248.901196][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.905988][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.944307][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.947714][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.573190][ T59] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 249.639847][ T7835] overlay: ./file0 is not a directory [ 249.736291][ T7837] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 249.740999][ T7837] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 249.751353][ T7835] overlayfs: failed to resolve './file0': -2 [ 249.780395][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 249.804513][ T59] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 249.808561][ T59] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 249.812386][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.822619][ T59] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 249.829635][ T59] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 249.834044][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.839946][ T59] usb 6-1: config 0 descriptor?? [ 249.884447][ T39] audit: type=1804 audit(1724521068.310:727): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.602" name="/newroot/162/file0/bus/bus/bus" dev="9p" ino=36575551 res=1 errno=0 [ 249.909179][ T7837] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 250.116486][ T5105] usb 6-1: USB disconnect, device number 7 [ 250.217184][ T39] audit: type=1326 audit(1724521068.650:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.3.604" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 250.629121][ T39] audit: type=1326 audit(1724521069.050:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.607" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x0 [ 250.653224][ T5386] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.853068][ T5386] usb 6-1: Using ep0 maxpacket: 32 [ 250.860728][ T5386] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.868530][ T5386] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.883104][ T5386] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.890491][ T5386] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 250.903063][ T5386] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.913098][ T5386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.919966][ T5386] usb 6-1: config 0 descriptor?? [ 250.953084][ T5350] Bluetooth: hci6: command tx timeout [ 251.134345][ T7858] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 251.197634][ T5386] usb 6-1: USB disconnect, device number 8 [ 252.200777][ T39] audit: type=1326 audit(1724521070.630:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.214257][ T39] audit: type=1326 audit(1724521070.640:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.228320][ T39] audit: type=1326 audit(1724521070.660:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.255754][ T39] audit: type=1326 audit(1724521070.660:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.264259][ T39] audit: type=1326 audit(1724521070.660:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.273312][ T39] audit: type=1326 audit(1724521070.660:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.288487][ T39] audit: type=1326 audit(1724521070.660:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.612" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 252.383084][ T5350] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 252.392892][ T7873] evm: overlay not supported [ 252.432552][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 252.651775][ T7876] block device autoloading is deprecated and will be removed. [ 252.882878][ T7878] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 252.888073][ T7878] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 253.011691][ T7878] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 253.033486][ T5350] Bluetooth: hci6: command tx timeout [ 254.684846][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.975911][ T7927] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 254.989297][ T7927] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 255.063976][ T5350] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 255.138177][ T7930] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 256.343475][ T7948] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 256.363381][ T7948] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 256.552845][ T7950] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 258.010969][ T7967] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 258.017623][ T7967] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 258.145197][ T7967] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 259.894029][ T7982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.149573][ T7986] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 260.173102][ T7986] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 260.340768][ T7986] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.494113][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 260.750004][ T7995] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 260.754192][ T7995] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 260.841891][ T7995] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.127956][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.130836][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.513565][ T5350] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 262.369386][ T8017] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 262.374811][ T8017] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 262.492720][ T8017] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.745685][ T8026] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 262.750704][ T8026] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 262.858696][ T8026] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 263.422079][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 263.422089][ T39] audit: type=1400 audit(1724521081.850:804): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE6161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 264.827965][ T1114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.953130][ T1114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.219077][ T1114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.225221][ T1114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.480035][ T4770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.508433][ T4770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.524616][ T1114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.528729][ T1114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.534951][ T4770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.539786][ T4770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.545726][ T4770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 265.549825][ T4770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.647760][ T1114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.652317][ T1114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.992323][ T1114] bridge_slave_1: left allmulticast mode [ 265.995571][ T1114] bridge_slave_1: left promiscuous mode [ 266.015940][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.070986][ T1114] bridge_slave_0: left allmulticast mode [ 266.074116][ T1114] bridge_slave_0: left promiscuous mode [ 266.076613][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.980630][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.001995][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.017477][ T1114] bond0 (unregistering): Released all slaves [ 267.037118][ T1114] bond1 (unregistering): Released all slaves [ 267.069715][ T1114] bond2 (unregistering): Released all slaves [ 267.100860][ T1114] bond3 (unregistering): Released all slaves [ 267.121310][ T1114] bond4 (unregistering): Released all slaves [ 267.147159][ T1114] bond5 (unregistering): Released all slaves [ 267.175055][ T1114] bond6 (unregistering): Released all slaves [ 267.188943][ T1114] bond7 (unregistering): Released all slaves [ 267.210936][ T1114] bond8 (unregistering): Released all slaves [ 267.237377][ T1114] bond9 (unregistering): Released all slaves [ 267.268920][ T1114] bond10 (unregistering): Released all slaves [ 267.280554][ T1114] bond11 (unregistering): Released all slaves [ 267.305317][ T1114] bond12 (unregistering): Released all slaves [ 267.336637][ T1114] bond13 (unregistering): Released all slaves [ 267.345123][ T1114] bond14 (unregistering): Released all slaves [ 267.357818][ T1114] bond15 (unregistering): Released all slaves [ 267.370281][ T1114] bond16 (unregistering): Released all slaves [ 267.403804][ T1114] bond17 (unregistering): Released all slaves [ 267.449872][ T1114] bond18 (unregistering): Released all slaves [ 267.463239][ T1114] bond19 (unregistering): Released all slaves [ 267.505726][ T8047] chnl_net:caif_netlink_parms(): no params data found [ 267.613807][ T4770] Bluetooth: hci3: command tx timeout [ 267.806495][ T39] audit: type=1326 audit(1724521086.240:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.875443][ T39] audit: type=1326 audit(1724521086.290:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.903296][ T39] audit: type=1326 audit(1724521086.290:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.945096][ T39] audit: type=1326 audit(1724521086.290:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.951631][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 267.954160][ T39] audit: type=1326 audit(1724521086.290:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.954205][ T39] audit: type=1326 audit(1724521086.290:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.954243][ T39] audit: type=1326 audit(1724521086.290:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.954282][ T39] audit: type=1326 audit(1724521086.290:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 267.996008][ T39] audit: type=1326 audit(1724521086.290:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.109704][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.113935][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.129289][ T8047] bridge_slave_0: entered allmulticast mode [ 268.139011][ T8047] bridge_slave_0: entered promiscuous mode [ 268.150983][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 268.224730][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.232423][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.240273][ T8047] bridge_slave_1: entered allmulticast mode [ 268.245577][ T8047] bridge_slave_1: entered promiscuous mode [ 268.493449][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 268.493463][ T39] audit: type=1326 audit(1724521086.930:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.513430][ T39] audit: type=1326 audit(1724521086.940:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.526644][ T39] audit: type=1326 audit(1724521086.940:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.557094][ T8047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.565744][ T8047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.571644][ T39] audit: type=1326 audit(1724521087.000:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.597234][ T39] audit: type=1326 audit(1724521087.000:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.663111][ T39] audit: type=1326 audit(1724521087.000:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.711368][ T39] audit: type=1326 audit(1724521087.030:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.722892][ T39] audit: type=1326 audit(1724521087.040:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.733626][ T39] audit: type=1326 audit(1724521087.040:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.744543][ T39] audit: type=1326 audit(1724521087.070:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.2.661" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 268.992610][ T8047] team0: Port device team_slave_0 added [ 268.993403][ T59] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 269.022293][ T8047] team0: Port device team_slave_1 added [ 269.173443][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 269.195571][ T59] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 269.201631][ T59] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 269.213041][ T59] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 269.217796][ T59] usb 6-1: Product: syz [ 269.219799][ T59] usb 6-1: Manufacturer: syz [ 269.221904][ T59] usb 6-1: SerialNumber: syz [ 269.257212][ T59] usb 6-1: config 0 descriptor?? [ 269.260537][ T8087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.308803][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.311508][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.331920][ T8047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.344490][ T8096] netlink: 'syz.2.664': attribute type 14 has an invalid length. [ 269.383093][ T1114] hsr_slave_0: left promiscuous mode [ 269.393966][ T1114] hsr_slave_1: left promiscuous mode [ 269.451654][ T1114] veth1_macvtap: left promiscuous mode [ 269.455652][ T1114] veth0_macvtap: left promiscuous mode [ 269.458205][ T1114] veth1_vlan: left promiscuous mode [ 269.460774][ T1114] veth0_vlan: left promiscuous mode [ 269.553755][ T25] usb 6-1: USB disconnect, device number 9 [ 269.685198][ T4770] Bluetooth: hci3: command tx timeout [ 270.686322][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 271.091465][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 271.753361][ T4770] Bluetooth: hci3: command tx timeout [ 272.449973][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.459324][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.470659][ T8047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.716291][ T8047] hsr_slave_0: entered promiscuous mode [ 272.777686][ T8047] hsr_slave_1: entered promiscuous mode [ 272.803619][ T8047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.807362][ T8047] Cannot create hsr debugfs directory [ 273.188014][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 273.833242][ T4770] Bluetooth: hci3: command tx timeout [ 274.118405][ T8047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.154353][ T8047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.172833][ T8047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.189803][ T8047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.301348][ T8047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.335256][ T8047] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.348370][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.351744][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.369343][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.372470][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.621640][ T8047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.701840][ T8047] veth0_vlan: entered promiscuous mode [ 274.716751][ T8047] veth1_vlan: entered promiscuous mode [ 274.762137][ T8047] veth0_macvtap: entered promiscuous mode [ 274.770121][ T8047] veth1_macvtap: entered promiscuous mode [ 274.788194][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.792756][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.798191][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.802722][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.807404][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.811876][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.818430][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.846197][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.850611][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.863088][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.867897][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.872198][ T8047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.887613][ T8047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.895624][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.902784][ T8047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.907828][ T8047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.911661][ T8047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.919020][ T8047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.031928][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.043762][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.061807][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.078649][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.273489][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 275.273504][ T39] audit: type=1326 audit(1724521093.710:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.1.675" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 275.691579][ T4770] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 276.528949][ T163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.779900][ T163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.905049][ T163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.032538][ T163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.054523][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'. [ 277.057292][ T5350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.066180][ T5350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.070692][ T5350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.078871][ T5350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.083533][ T5350] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.089354][ T5350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.370264][ T163] bridge_slave_1: left allmulticast mode [ 277.375434][ T163] bridge_slave_1: left promiscuous mode [ 277.378270][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.397759][ T163] bridge_slave_0: left allmulticast mode [ 277.401296][ T163] bridge_slave_0: left promiscuous mode [ 277.416153][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.050238][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.095886][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.125613][ T163] bond0 (unregistering): Released all slaves [ 278.138177][ T163] bond1 (unregistering): Released all slaves [ 278.150114][ T163] bond2 (unregistering): Released all slaves [ 278.162851][ T163] bond3 (unregistering): Released all slaves [ 278.186624][ T163] bond4 (unregistering): Released all slaves [ 278.199595][ T163] bond5 (unregistering): Released all slaves [ 278.210454][ T163] bond6 (unregistering): Released all slaves [ 278.236126][ T163] bond7 (unregistering): Released all slaves [ 278.251074][ T163] bond8 (unregistering): Released all slaves [ 278.264002][ T163] bond9 (unregistering): Released all slaves [ 278.279209][ T163] bond10 (unregistering): Released all slaves [ 278.290308][ T163] bond11 (unregistering): Released all slaves [ 278.303528][ T163] bond12 (unregistering): Released all slaves [ 278.315438][ T163] bond13 (unregistering): Released all slaves [ 278.330242][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 279.040928][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 279.203604][ T5350] Bluetooth: hci2: command tx timeout [ 279.213120][ T39] audit: type=1326 audit(1724521097.640:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.3.690" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 279.236123][ T163] hsr_slave_0: left promiscuous mode [ 279.239355][ T163] hsr_slave_1: left promiscuous mode [ 279.301783][ T163] veth1_macvtap: left promiscuous mode [ 279.304541][ T163] veth0_macvtap: left promiscuous mode [ 279.307169][ T163] veth1_vlan: left promiscuous mode [ 279.309495][ T163] veth0_vlan: left promiscuous mode [ 281.121982][ T163] team0 (unregistering): Port device team_slave_1 removed [ 281.221629][ T163] team0 (unregistering): Port device team_slave_0 removed [ 281.275377][ T5350] Bluetooth: hci2: command tx timeout [ 281.768859][ T5350] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 282.770644][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.777243][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.782785][ T8203] bridge_slave_0: entered allmulticast mode [ 282.802704][ T8203] bridge_slave_0: entered promiscuous mode [ 282.843781][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.846506][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.870773][ T8203] bridge_slave_1: entered allmulticast mode [ 282.875814][ T8203] bridge_slave_1: entered promiscuous mode [ 283.046397][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.185103][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.336653][ T8203] team0: Port device team_slave_0 added [ 283.353224][ T5350] Bluetooth: hci2: command tx timeout [ 283.468484][ T8203] team0: Port device team_slave_1 added [ 283.504746][ T163] IPVS: stop unused estimator thread 0... [ 283.654736][ T8291] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 283.749456][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.768490][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.782664][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.794027][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.806312][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.833926][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.160795][ T8203] hsr_slave_0: entered promiscuous mode [ 284.175304][ T8203] hsr_slave_1: entered promiscuous mode [ 284.190095][ T8203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.193742][ T8203] Cannot create hsr debugfs directory [ 284.567130][ T5350] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 285.368756][ T8335] fuse: Bad value for 'user_id' [ 285.388273][ T8335] fuse: Bad value for 'user_id' [ 285.447172][ T5350] Bluetooth: hci2: command tx timeout [ 285.813323][ T4770] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 286.090422][ T8203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.127295][ T8203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.147160][ T8203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.197786][ T8335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.202629][ T8335] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 286.227119][ T8203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.260929][ T8335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 286.265071][ T8335] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 286.296297][ T8335] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 286.299298][ T8335] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 286.374314][ T8335] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 286.376940][ T8335] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 286.476546][ T8335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.479606][ T8335] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 286.512704][ T8335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.519551][ T8335] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 286.544526][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.597708][ T8357] vivid-003: ================= START STATUS ================= [ 286.601717][ T8357] vivid-003: Radio HW Seek Mode: Bounded [ 286.611502][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.630344][ T8357] vivid-003: Radio Programmable HW Seek: false [ 286.635356][ T8357] vivid-003: RDS Rx I/O Mode: Block I/O [ 286.638366][ T8357] vivid-003: Generate RBDS Instead of RDS: false [ 286.641119][ T8357] vivid-003: RDS Reception: true [ 286.643966][ T8357] vivid-003: RDS Program Type: 0 inactive [ 286.647252][ T8357] vivid-003: RDS PS Name: inactive [ 286.680245][ T8357] vivid-003: RDS Radio Text: inactive [ 286.683109][ T8357] vivid-003: RDS Traffic Announcement: false inactive [ 286.687924][ T8357] vivid-003: RDS Traffic Program: false inactive [ 286.690784][ T8357] vivid-003: RDS Music: false inactive [ 286.723190][ T8357] vivid-003: ================== END STATUS ================== [ 286.775646][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.778454][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.796473][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.799724][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.154457][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.240158][ T8203] veth0_vlan: entered promiscuous mode [ 287.289433][ T8203] veth1_vlan: entered promiscuous mode [ 287.348288][ T8203] veth0_macvtap: entered promiscuous mode [ 287.356552][ T8203] veth1_macvtap: entered promiscuous mode [ 287.457091][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.461652][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.467358][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.472127][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.476856][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.481385][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.486105][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.490751][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.499775][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.512426][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.519354][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.528706][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.533715][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.537932][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.542428][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.556178][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.564790][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.578010][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.597096][ T8203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.604388][ T8203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.608380][ T8203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.611686][ T8203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.778186][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.787047][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.831780][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.851287][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.859796][ T39] audit: type=1326 audit(1724521106.290:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.3.715" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 288.938713][ T39] audit: type=1326 audit(1724521107.370:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.719" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 290.320006][ T8421] ------------[ cut here ]------------ [ 290.323397][ T8421] WARNING: CPU: 0 PID: 8421 at mm/page_table_check.c:207 __page_table_check_ptes_set+0x2fa/0x3e0 [ 290.327605][ T8421] Modules linked in: [ 290.329195][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.2.718 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 290.335954][ T8421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.340683][ T8421] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 290.343881][ T8421] Code: e9 91 fe ff ff e8 d6 43 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 35 46 97 ff 48 85 ed 0f 84 85 00 00 00 e8 b7 43 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 a9 43 97 ff eb 69 cc cc cc e8 9f 43 97 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 290.351315][ T8421] RSP: 0000:ffffc90006897a28 EFLAGS: 00010293 [ 290.367900][ T8421] RAX: 0000000000000000 RBX: ffff8880250f3000 RCX: ffffffff81f3d8eb [ 290.371068][ T8421] RDX: ffff8880658b0000 RSI: ffffffff81f3d8f9 RDI: 0000000000000007 [ 290.374451][ T8421] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 290.377929][ T8421] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 290.381315][ T8421] R13: ffff88801f158000 R14: 0000000000000001 R15: 1ffff92000d12f47 [ 290.400501][ T8421] FS: 0000000000000000(0000) GS:ffff88802c000000(0063) knlGS:00000000583e7440 [ 290.404073][ T8421] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 290.407013][ T8421] CR2: 00000000200002c0 CR3: 0000000020892000 CR4: 0000000000350ef0 [ 290.411001][ T8421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.414954][ T8421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.418223][ T8421] Call Trace: [ 290.419712][ T8421] [ 290.421022][ T8421] ? show_regs+0x8c/0xa0 [ 290.423059][ T8421] ? __warn+0xe5/0x3c0 [ 290.424962][ T8421] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 290.427573][ T8421] ? report_bug+0x3c0/0x580 [ 290.429496][ T8421] ? handle_bug+0x3d/0x70 [ 290.431199][ T8421] ? exc_invalid_op+0x17/0x50 [ 290.433398][ T8421] ? asm_exc_invalid_op+0x1a/0x20 [ 290.435638][ T8421] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 290.437934][ T8421] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 290.440264][ T8421] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 290.442568][ T8421] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 290.445686][ T8421] ? find_held_lock+0x2d/0x110 [ 290.448295][ T8421] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 290.451569][ T8421] ? rcu_read_unlock+0x17/0x60 [ 290.454499][ T8421] set_ptes.constprop.0+0x193/0x1d0 [ 290.457482][ T8421] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 290.460522][ T8421] do_swap_page+0x1243/0x3e00 [ 290.462875][ T8421] ? __pfx_do_swap_page+0x10/0x10 [ 290.465217][ T8421] ? pte_offset_map_nolock+0xfe/0x1c0 [ 290.468321][ T8421] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 290.471841][ T8421] __handle_mm_fault+0x146b/0x5350 [ 290.474168][ T8421] ? down_read_trylock+0x1ed/0x3f0 [ 290.476443][ T8421] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 290.478769][ T8421] ? __pfx___handle_mm_fault+0x10/0x10 [ 290.481203][ T8421] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 290.483721][ T8421] handle_mm_fault+0x44e/0x7b0 [ 290.485870][ T8421] ? __pkru_allows_pkey+0x52/0xb0 [ 290.488218][ T8421] do_user_addr_fault+0x60d/0x13f0 [ 290.490587][ T8421] exc_page_fault+0x5c/0xc0 [ 290.492637][ T8421] asm_exc_page_fault+0x26/0x30 [ 290.496194][ T8421] RIP: 0023:0xf7261311 [ 290.498346][ T8421] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 290.507288][ T8421] RSP: 002b:00000000ffb572cc EFLAGS: 00010202 [ 290.510208][ T8421] RAX: 0000000000000000 RBX: 00000000f7400ff4 RCX: 0000000000000002 [ 290.514765][ T8421] RDX: 0000000000000008 RSI: 00000000f6d203ae RDI: 00000000200002c0 [ 290.518300][ T8421] RBP: 00000000ffb57548 R08: 0000000000000000 R09: 0000000000000000 [ 290.521757][ T8421] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 290.525337][ T8421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.528879][ T8421] [ 290.530242][ T8421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 290.533378][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.2.718 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 290.538810][ T8421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.543739][ T8421] Call Trace: [ 290.545206][ T8421] [ 290.546496][ T8421] dump_stack_lvl+0x3d/0x1f0 [ 290.548559][ T8421] panic+0x6dc/0x7c0 [ 290.550286][ T8421] ? __pfx_panic+0x10/0x10 [ 290.552262][ T8421] ? show_trace_log_lvl+0x363/0x500 [ 290.554456][ T8421] ? check_panic_on_warn+0x1f/0xb0 [ 290.556458][ T8421] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 290.558772][ T8421] check_panic_on_warn+0xab/0xb0 [ 290.561006][ T8421] __warn+0xf1/0x3c0 [ 290.562745][ T8421] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 290.565089][ T8421] report_bug+0x3c0/0x580 [ 290.566771][ T8421] handle_bug+0x3d/0x70 [ 290.568657][ T8421] exc_invalid_op+0x17/0x50 [ 290.570411][ T8421] asm_exc_invalid_op+0x1a/0x20 [ 290.572277][ T8421] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 290.574880][ T8421] Code: e9 91 fe ff ff e8 d6 43 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 35 46 97 ff 48 85 ed 0f 84 85 00 00 00 e8 b7 43 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 a9 43 97 ff eb 69 cc cc cc e8 9f 43 97 [ 290.581832][ T8421] RSP: 0000:ffffc90006897a28 EFLAGS: 00010293 [ 290.583893][ T8421] RAX: 0000000000000000 RBX: ffff8880250f3000 RCX: ffffffff81f3d8eb [ 290.586532][ T8421] RDX: ffff8880658b0000 RSI: ffffffff81f3d8f9 RDI: 0000000000000007 [ 290.589198][ T8421] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 290.592031][ T8421] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 290.595175][ T8421] R13: ffff88801f158000 R14: 0000000000000001 R15: 1ffff92000d12f47 [ 290.598362][ T8421] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 290.600661][ T8421] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 290.602962][ T8421] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 290.605384][ T8421] ? find_held_lock+0x2d/0x110 [ 290.607289][ T8421] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 290.609843][ T8421] ? rcu_read_unlock+0x17/0x60 [ 290.611709][ T8421] set_ptes.constprop.0+0x193/0x1d0 [ 290.614335][ T8421] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 290.616543][ T8421] do_swap_page+0x1243/0x3e00 [ 290.618341][ T8421] ? __pfx_do_swap_page+0x10/0x10 [ 290.620332][ T8421] ? pte_offset_map_nolock+0xfe/0x1c0 [ 290.622390][ T8421] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 290.624641][ T8421] __handle_mm_fault+0x146b/0x5350 [ 290.626606][ T8421] ? down_read_trylock+0x1ed/0x3f0 [ 290.628605][ T8421] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 290.630591][ T8421] ? __pfx___handle_mm_fault+0x10/0x10 [ 290.632565][ T8421] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 290.634445][ T8421] handle_mm_fault+0x44e/0x7b0 [ 290.636351][ T8421] ? __pkru_allows_pkey+0x52/0xb0 [ 290.638296][ T8421] do_user_addr_fault+0x60d/0x13f0 [ 290.640293][ T8421] exc_page_fault+0x5c/0xc0 [ 290.641917][ T8421] asm_exc_page_fault+0x26/0x30 [ 290.643618][ T8421] RIP: 0023:0xf7261311 [ 290.645000][ T8421] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 290.651521][ T8421] RSP: 002b:00000000ffb572cc EFLAGS: 00010202 [ 290.653850][ T8421] RAX: 0000000000000000 RBX: 00000000f7400ff4 RCX: 0000000000000002 [ 290.657038][ T8421] RDX: 0000000000000008 RSI: 00000000f6d203ae RDI: 00000000200002c0 [ 290.660025][ T8421] RBP: 00000000ffb57548 R08: 0000000000000000 R09: 0000000000000000 [ 290.663081][ T8421] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 290.666339][ T8421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.669532][ T8421] [ 290.671381][ T8421] Kernel Offset: disabled [ 290.673416][ T8421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:38:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa6e65 RDI=ffffffff9511c240 RBP=ffffffff9511c200 RSP=ffffc90006897400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000073 R14=ffffffff84fa6e00 R15=0000000000000000 RIP=ffffffff84fa6e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200002c0 CR3=0000000020892000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000006ac013 RBX=0000000000000001 RCX=ffffffff8b056f49 RDX=0000000000000000 RSI=ffffffff8b4cd020 RDI=ffffffff8bb055e0 RBP=ffffed1002ce1910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000000 R12=0000000000000001 R13=ffff88801670c880 R14=ffffffff90114318 R15=0000000000000000 RIP=ffffffff8b05833f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7455e10 CR3=000000002b73c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000ffffffff RCX=00000000ffffffff RDX=00000000000f4240 RSI=0000000000000002 RDI=00000000f7444f8c RBP=0000000000000002 RSP=ffffc90006c67d80 R8 =0000000000000005 R9 =000000000000000d R10=0000000000000001 R11=0000000000000000 R12=1ffff92000d8cfb3 R13=00000000f7444f8c R14=0000000000000000 R15=0000000000000000 RIP=ffffffff817e8ba0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7444f84 CR3=0000000028774000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff28b70b6 RDX=ffff88801a522440 RSI=ffffffff813be4f4 RDI=ffffffff8bb055e0 RBP=ffff88801a2dc480 RSP=ffffc90000e5ed18 R8 =0000000000000001 R9 =fffffbfff28b6ae0 R10=ffffffff945b5707 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802c33fc80 R15=ffffed100345b890 RIP=ffffffff813be4f6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7465014 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000