last executing test programs: 7.11835078s ago: executing program 0 (id=438): socket$alg(0x26, 0x5, 0x0) r0 = inotify_init1(0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x80083314) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000440)=ANY=[], 0x60) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000240)="0093ba7b3600000000000000", 0xc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002a000900000000000000000004b8fa2c82f5c68dc7b400882b04001a80715d2e7b9d37643fe8dd41d385efbf3a50e6bd7902661593eb14"], 0x18}, 0x1, 0x3000000}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r6, &(0x7f00000000c0)=""/108, 0x6c) 6.040026735s ago: executing program 0 (id=444): openat$dir(0xffffff9c, 0x0, 0x10100, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) write(0xffffffffffffffff, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x8905, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = syz_io_uring_setup(0x232, &(0x7f0000000080)={0x0, 0x200000, 0x1, 0x1, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'vlan0\x00', 0x0}) 6.031213627s ago: executing program 1 (id=445): openat$dir(0xffffff9c, 0x0, 0x10100, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) write(0xffffffffffffffff, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x8905, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = syz_io_uring_setup(0x232, &(0x7f0000000080)={0x0, 0x200000, 0x1, 0x1, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'vlan0\x00', 0x0}) 4.398639314s ago: executing program 3 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x4, 0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000000080003400000000a0900010073797a300000000009"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000002400)=[{0x1, 0x1, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/86, 0x56}], &(0x7f0000000680)=[0x10, 0x3, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/164, 0xa4}, {0x0}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/62, 0x3e}, {&(0x7f0000000a40)=""/49, 0x31}], &(0x7f0000000c00)=[0x5, 0x6, 0x5, 0xfffffffffffffff3, 0x6, 0xf06, 0x6, 0x7b58]}, {0x9, 0x1, 0x0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000d00)=""/65, 0x41}, {&(0x7f0000000d80)=""/198, 0xc6}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/132, 0x84}, {&(0x7f0000001100)=""/7, 0x7}, {&(0x7f0000001140)=""/159, 0x9f}, {&(0x7f0000001200)=""/208, 0xd0}, {&(0x7f0000001300)=""/4096, 0x1000}], &(0x7f00000023c0)=[0x6f]}], 0x3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffe4) 4.160179518s ago: executing program 3 (id=451): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="85000000a00000003500000000f31700850000002300000095000000000000007aaa8ab7f0e877dc1633c777bf404435e9e08854a5214b25aa1adc346f2d6b826db20de437e5824ce97b490ea4a7564f920eb396378a769ba18487ed91ac1a8a32b100829cdaaee08a59dfc11af0d5fe99cc3499fe50c7e50e9fd439c257df194d32a99cf72aed10fc69fd777a6cb5fdb322e7e3bafd7c144f16ba20943908d17335743dce60c096c62958"], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x4, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0xcb}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x7}]}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d0000000400000008000020010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xfdfdffffffffffff, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x59) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r11, 0x5403, &(0x7f0000000040)={0x0, 0x3d, 0x0, 0x100000, 0x1a, "90737f0000fffffffffffffbff95647fffffeb"}) dup(r11) 3.85522578s ago: executing program 1 (id=452): socket$alg(0x26, 0x5, 0x0) r0 = inotify_init1(0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x80083314) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000440)=ANY=[], 0x60) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000240)="0093ba7b3600000000000000", 0xc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002a000900000000000000000004b8fa2c82f5c68dc7b400882b04001a80715d2e7b9d37643fe8dd41d385efbf3a50e6bd7902661593eb14"], 0x18}, 0x1, 0x3000000}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r6, &(0x7f00000000c0)=""/108, 0x6c) 3.662952113s ago: executing program 0 (id=453): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (fail_nth: 13) 3.489072149s ago: executing program 0 (id=455): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1300000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="188000"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000182f0000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000300000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x5, 0x1}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1df281, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r4, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x7, 0x400) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x90}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000003b80), 0x200, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000001400)={0x28, 0x2, 0x0, 0x0, &(0x7f00006a2000/0x2000)=nil, 0x2000, 0x1000000002}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000180)={0x28, 0x6, 0x0, 0x0, 0xa93, 0x0, 0x3fff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) 3.350142178s ago: executing program 3 (id=456): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wlc\x00'}, 0x2c) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c000300686173683a697000050005000a000000050004"], 0x50}}, 0x0) 3.349538636s ago: executing program 2 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x4, 0x4, @SEQ_NOTEON=@special}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xe, 0x82, 0x41, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x6, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2000000000000212, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x890b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc089d"], 0x78}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 2.820033769s ago: executing program 1 (id=458): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000340)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0xe}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 2.399063695s ago: executing program 2 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x4, 0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000000080003400000000a0900010073797a300000000009"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000002400)=[{0x1, 0x1, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/86, 0x56}], &(0x7f0000000680)=[0x10, 0x3, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/164, 0xa4}, {0x0}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/62, 0x3e}, {&(0x7f0000000a40)=""/49, 0x31}], &(0x7f0000000c00)=[0x5, 0x6, 0x5, 0xfffffffffffffff3, 0x6, 0xf06, 0x6, 0x7b58]}, {0x9, 0x1, 0x0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000d00)=""/65, 0x41}, {&(0x7f0000000d80)=""/198, 0xc6}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/132, 0x84}, {&(0x7f0000001100)=""/7, 0x7}, {&(0x7f0000001140)=""/159, 0x9f}, {&(0x7f0000001200)=""/208, 0xd0}, {&(0x7f0000001300)=""/4096, 0x1000}], &(0x7f00000023c0)=[0x6f]}], 0x3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffe4) 2.248769627s ago: executing program 2 (id=460): socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x4f, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c0008000000000000000000080001"], 0x90}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) pipe(&(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x4f, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c0008000000000000000000080001"], 0x90}}, 0x0) (async) 2.198816862s ago: executing program 2 (id=461): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x30001, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f00000002c0)='./file0\x00', r0, 0x4000, r7}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x4}]}}]}, 0x40}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0x40, 0x2, 0x2e}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) syz_usb_connect(0x0, 0x17e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000965bb108a1172801f6050102030109026c0101000000000904"], 0x0) 1.784730141s ago: executing program 0 (id=462): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mknod(0x0, 0x200, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0)={&(0x7f0000001000)={[{&(0x7f0000000480)="278a9e9f6f96d7a18e2f66e9d46e126faccc8f6a4e5a21367a7106c8c7f12f41503606e6f92785773d5b062e5b2c9c3d63ba6a2f653f254dcd2caaa05d4ebe4f7b2c6facd307e7fe479bb2695bdb7a1155cb1643da012d79a82ddea62ebab8e75eba228fd90c7a2fb4ec84f867d9c8729a0cd01bad25b3bb6b5c9297ec2eefee69348ded52e79f3916fbd641914895b1a2a5d919d2e97c6046cc0198d46cb77fba849639a09a23fe3c73f76aa1b1aa11ae410b1405402160e149c4b179a43d1ef9a0ca914814f7e706200f83ea77ea06f45c71e632879029c957cb86d976c27001015a94c57dc0214c4acb78efa97d10", 0xf0}]}, 0x1, 0x2}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x9362, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) unshare(0x8000500) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x20}}, 0x0) 1.53837505s ago: executing program 1 (id=463): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000007f00)={0x8, @raw_data="cd70076897d98b3f2cd1d76c2d9008b2408b8d9462f13cebeac056ee759e2f69def5ad2abc42b4a52f6b26be3e6fe8f5af4a0241defef1ba8f55cdbe6918de29e8fe1759d96b6cb2c37b56896e1ea18d9eb8b25cb3805b69fadbfcfc6b033d0b06cc3d00c2afaca091de03984ccfa2715ffe5de02f53b96288cf9ccf508f1096cdec174f91fbff6ccd37847c850abc034e02575ef27404669de57f7899e124e044fc9b2dce5a36f83de0cb8af8be3d66acf8955e9332a8a23eafee514c4e84160ac8154ec0672765"}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x400, 'syz1\x00', &(0x7f00000004c0)=[':#,\x00'], 0x4}) socket$netlink(0x10, 0x3, 0x6) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)=""/229) (fail_nth: 1) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 1.390181849s ago: executing program 3 (id=464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 1.109993115s ago: executing program 1 (id=465): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000007f00)={0x8, @raw_data="cd70076897d98b3f2cd1d76c2d9008b2408b8d9462f13cebeac056ee759e2f69def5ad2abc42b4a52f6b26be3e6fe8f5af4a0241defef1ba8f55cdbe6918de29e8fe1759d96b6cb2c37b56896e1ea18d9eb8b25cb3805b69fadbfcfc6b033d0b06cc3d00c2afaca091de03984ccfa2715ffe5de02f53b96288cf9ccf508f1096cdec174f91fbff6ccd37847c850abc034e02575ef27404669de57f7899e124e044fc9b2dce5a36f83de0cb8af8be3d66acf8955e9332a8a23eafee514c4e84160ac8154ec0672765"}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x400, 'syz1\x00', &(0x7f00000004c0)=[':#,\x00'], 0x4}) socket$netlink(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r1 = socket$kcm(0x2, 0x0, 0x2) sendmsg$inet(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000000080)=0xfff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c200310"], 0xf) fsync(0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000080)=""/229) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 899.228929ms ago: executing program 2 (id=466): socket$alg(0x26, 0x5, 0x0) r0 = inotify_init1(0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x80083314) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000440)=ANY=[], 0x60) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000240)="0093ba7b3600000000000000", 0xc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002a000900000000000000000004b8fa2c82f5c68dc7b400882b04001a80715d2e7b9d37643fe8dd41d385efbf3a50e6bd7902661593eb14"], 0x18}, 0x1, 0x3000000}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r6, &(0x7f00000000c0)=""/108, 0x6c) 554.51994ms ago: executing program 1 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x4, 0x4, @SEQ_NOTEON=@special}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1, 0xe, 0x82, 0x41, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x0, 0x1, 0x6, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2000000000000212, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="16c1d8e2d822f8670c549f4e3f21f69402547cfba9f24a4a", @ANYRES64=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x40) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x890b, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000004000000040000000c000180cafc089d"], 0x78}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 543.892289ms ago: executing program 0 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000008963c544f51d0fb4fa529df214bea8c81a1a4aa1a37bca3fdb19476621", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$qrtr(0x2a, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xa02a, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0602, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0x1f, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396, 0x80}, 0x98) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) 537.218931ms ago: executing program 3 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x4, 0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$getown(0xffffffffffffffff, 0x9) get_robust_list(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000000080003400000000a0900010073797a300000000009"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000002400)=[{0x1, 0x1, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/86, 0x56}], &(0x7f0000000680)=[0x10, 0x3, 0x4]}, {0x5, 0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/164, 0xa4}, {0x0}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/62, 0x3e}, {&(0x7f0000000a40)=""/49, 0x31}], &(0x7f0000000c00)=[0x5, 0x6, 0x5, 0xfffffffffffffff3, 0x6, 0xf06, 0x6, 0x7b58]}, {0x9, 0x1, 0x0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000d00)=""/65, 0x41}, {&(0x7f0000000d80)=""/198, 0xc6}, {&(0x7f0000000e80)=""/141, 0x8d}, {&(0x7f0000000f40)=""/132, 0x84}, {&(0x7f0000001100)=""/7, 0x7}, {&(0x7f0000001140)=""/159, 0x9f}, {&(0x7f0000001200)=""/208, 0xd0}, {&(0x7f0000001300)=""/4096, 0x1000}], &(0x7f00000023c0)=[0x6f]}], 0x3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffe4) 320.018441ms ago: executing program 3 (id=470): r0 = socket(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044080034"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) 0s ago: executing program 2 (id=471): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x4}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002580)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000006000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258273b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493e1fa60e63fda97a29682881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f07be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e015cae2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c0100ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f03006e1fa89917e131f4034a8383e99c3568fd04201b37cd92c52f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c65608fda6ed5d08e7a796042aa127d8741057e8c82d4cd1ff87d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de57f9c4af1e094fa4e3f05528c2a165996efb5a430c08dd810bc97204b767dd969721a26aa74e1bf4b9e0ac67ca77315af1c88265f494f88d1cc6cec905602f479c622422c7a6738cce189a2f4f3fd25a5e3a183e60144a8491333593188f1133a03db633428ff2cc0ed186f7c169386b22a65de09e7bc87ddc48d9f932f39639a012b43efd7c64221d5a36db82f045dc05a04da03df9eca141636c35f863a77f3ee3ba73b7d79d69494750de5fa25bfd0c4874041f3f2ef8db57e9c79039e47a010b998277837559c3a00000000b72cb719bfa4a7a95014dede3e21509f5042b4c9a27c9e3e7d71b388fca4ac8153c0accc452e849e52fab7496d96282fce364944000000000000978d4322143b27bfcdae624a79119351ae3643cc13db6119f1dd02f7477833191e8d140f5753eac5d4eb18d49c34136364b8540dbd4697762e003f3789c8bc31fd3ff8c1495f9ddac0607739f47d7e75401e6c1c1150e8d5b2ed2a233316e597a2112f9d68f15b7eec5a80666551d568eaa402f0848641753e6cdb871ad262ec8576c78e88f27707b93c1de78900"/1223], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580680710a486dd", 0x0, 0x23b, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) gettid() r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) read(r5, &(0x7f0000000200)=""/200, 0xc8) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x3e) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000e80)) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000440)='cpu.pressure\x00', 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getuid() sendmmsg$unix(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="3102e840ca9908241371a3f9bb61fdfddba3e0334562c27f316598255a880b64552c0ae8e93a6fa304793308a7970652806701db2dbc09ff3139e8b93e7fc759", 0x40}, {&(0x7f0000000040)="77e756e61900d402", 0x8}, {&(0x7f0000000300)="c28c36542a1712c2a5f1d23d7654f558a71ee48b491d172367c2755b7ab349a5773534af8af1f967d100afdee959a2b94e8587abde6906e520a456aa3429cc3c925af3a1f0a4477f719d5faf3c1006aa9951256202e2a17f3bee1b8b475be10f3aa7e2a63dc7e8aa71713cec950baf02b090d80b1920df3db0050809517f6645823cf3ffcbfa67b28cf39d0cdc9b1987f40cdd3083c2c27d11c66deab5ed106a42d4caa102c6185332e2", 0xaa}], 0x3, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="256bb2fe13bb2c544f1b784b8a15d4fed0396ac9c35aadd1a314f7a1610100269a950d7e762258a6b4ae028e876b6c42f9dee3359334917899103e03a3a823a77b9617eb42d345328031a23147f1ca672b", 0x51}], 0x1, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x24, 0x1, 0x1, [r7, r9, r5, r5, r5]}}, @rights={{0x20, 0x1, 0x1, [r7, r7, r5, r8]}}, @rights={{0x18, 0x1, 0x1, [r7, r5]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, r10}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r6, r11, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0xf8, 0x80}}], 0x2, 0x55) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x1, 0xfffffffffffffff8) dup2(r7, r5) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x14) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 1 (id=472): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) (fail_nth: 2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:42329' (ED25519) to the list of known hosts. [ 41.173572][ T5334] cgroup: Unknown subsys name 'net' [ 41.539497][ T5334] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.885007][ T5334] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.771734][ T5358] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.772746][ T5357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.777219][ T5357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.778782][ T5361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.779498][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.782693][ T5361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.783407][ T5357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.785266][ T5361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.787343][ T5357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.788740][ T5361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.790672][ T5357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.792159][ T5359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.793543][ T5361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.794462][ T5357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.796376][ T5361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.798917][ T4777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.800089][ T5361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.803498][ T5357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.813997][ T4777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.822725][ T5358] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.825017][ T5358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.827112][ T5358] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.844671][ T5358] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.857352][ T5358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.108756][ T5360] chnl_net:caif_netlink_parms(): no params data found [ 49.177449][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 49.214825][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 49.313852][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 49.341951][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.343844][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.345864][ T5360] bridge_slave_0: entered allmulticast mode [ 49.348197][ T5360] bridge_slave_0: entered promiscuous mode [ 49.352321][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.354188][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.356061][ T5360] bridge_slave_1: entered allmulticast mode [ 49.358331][ T5360] bridge_slave_1: entered promiscuous mode [ 49.418231][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.420756][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.423151][ T5348] bridge_slave_0: entered allmulticast mode [ 49.425932][ T5348] bridge_slave_0: entered promiscuous mode [ 49.457650][ T5360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.460974][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.462882][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.465003][ T5348] bridge_slave_1: entered allmulticast mode [ 49.468478][ T5348] bridge_slave_1: entered promiscuous mode [ 49.530548][ T5360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.549150][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.551563][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.554061][ T5354] bridge_slave_0: entered allmulticast mode [ 49.556837][ T5354] bridge_slave_0: entered promiscuous mode [ 49.575519][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.577435][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.579691][ T5349] bridge_slave_0: entered allmulticast mode [ 49.582021][ T5349] bridge_slave_0: entered promiscuous mode [ 49.630803][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.633200][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.635621][ T5354] bridge_slave_1: entered allmulticast mode [ 49.638363][ T5354] bridge_slave_1: entered promiscuous mode [ 49.643088][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.645107][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.647605][ T5349] bridge_slave_1: entered allmulticast mode [ 49.650645][ T5349] bridge_slave_1: entered promiscuous mode [ 49.671417][ T5360] team0: Port device team_slave_0 added [ 49.674972][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.738575][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.743983][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.751631][ T5360] team0: Port device team_slave_1 added [ 49.755101][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.758942][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.847911][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.870032][ T5349] team0: Port device team_slave_0 added [ 49.873614][ T5348] team0: Port device team_slave_0 added [ 49.912204][ T5349] team0: Port device team_slave_1 added [ 49.915556][ T5348] team0: Port device team_slave_1 added [ 49.917789][ T5360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.922499][ T5360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.929226][ T5360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.003709][ T5360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.005570][ T5360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.012358][ T5360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.017687][ T5354] team0: Port device team_slave_0 added [ 50.019942][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.021776][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.028405][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.051143][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.053003][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.060645][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.065438][ T5354] team0: Port device team_slave_1 added [ 50.067699][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.070421][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.078365][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.101519][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.103357][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.110223][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.194407][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.196304][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.205604][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.244576][ T5360] hsr_slave_0: entered promiscuous mode [ 50.246725][ T5360] hsr_slave_1: entered promiscuous mode [ 50.250129][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.252657][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.262231][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.287296][ T5349] hsr_slave_0: entered promiscuous mode [ 50.294247][ T5349] hsr_slave_1: entered promiscuous mode [ 50.297035][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.300514][ T5349] Cannot create hsr debugfs directory [ 50.327054][ T5348] hsr_slave_0: entered promiscuous mode [ 50.329458][ T5348] hsr_slave_1: entered promiscuous mode [ 50.331349][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.333313][ T5348] Cannot create hsr debugfs directory [ 50.487223][ T5354] hsr_slave_0: entered promiscuous mode [ 50.490092][ T5354] hsr_slave_1: entered promiscuous mode [ 50.492338][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.494596][ T5354] Cannot create hsr debugfs directory [ 50.761642][ T5360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.769803][ T5360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.774476][ T5360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.778739][ T5360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.808663][ T5348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.814628][ T5348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.822069][ T5348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.826352][ T5348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.859829][ T67] Bluetooth: hci2: command tx timeout [ 50.861587][ T67] Bluetooth: hci3: command tx timeout [ 50.865505][ T5349] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.869197][ T5358] Bluetooth: hci0: command tx timeout [ 50.869567][ T5349] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.875299][ T5349] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.879509][ T5349] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.932507][ T5354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.938309][ T5354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.944315][ T5354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.950925][ T5358] Bluetooth: hci1: command tx timeout [ 50.951422][ T5354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.995906][ T5360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.008842][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.039804][ T5360] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.046221][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.053580][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.055677][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.073835][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.075764][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.079473][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.081402][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.097179][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.099189][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.111075][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.126129][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.144672][ T5348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.147398][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.155214][ T205] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.157121][ T205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.161860][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.163752][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.223523][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.237939][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.247814][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.249877][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.256171][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.258523][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.326645][ T5360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.330900][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.345475][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.371411][ T5348] veth0_vlan: entered promiscuous mode [ 51.378251][ T5348] veth1_vlan: entered promiscuous mode [ 51.403056][ T5360] veth0_vlan: entered promiscuous mode [ 51.409800][ T5360] veth1_vlan: entered promiscuous mode [ 51.427073][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.431272][ T5349] veth0_vlan: entered promiscuous mode [ 51.442466][ T5348] veth0_macvtap: entered promiscuous mode [ 51.447505][ T5348] veth1_macvtap: entered promiscuous mode [ 51.450708][ T5349] veth1_vlan: entered promiscuous mode [ 51.466951][ T5360] veth0_macvtap: entered promiscuous mode [ 51.473522][ T5360] veth1_macvtap: entered promiscuous mode [ 51.488939][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.498767][ T5349] veth0_macvtap: entered promiscuous mode [ 51.503222][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.506090][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.510207][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.513323][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.520472][ T5349] veth1_macvtap: entered promiscuous mode [ 51.527465][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.530461][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.533977][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.541283][ T5348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.543667][ T5348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.545962][ T5348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.548242][ T5348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.557396][ T5360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.560202][ T5360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.562503][ T5360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.564719][ T5360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.578610][ T5354] veth0_vlan: entered promiscuous mode [ 51.588314][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.591320][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.593876][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.596550][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.600752][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.604790][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.607477][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.610697][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.613401][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.616881][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.621170][ T5349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.623449][ T5349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.625716][ T5349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.627960][ T5349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.644860][ T5354] veth1_vlan: entered promiscuous mode [ 51.699653][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.700342][ T5354] veth0_macvtap: entered promiscuous mode [ 51.701900][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.725835][ T5354] veth1_macvtap: entered promiscuous mode [ 51.734308][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.736365][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.740178][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.742216][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.758681][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.759441][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.761058][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.763556][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.767999][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.772284][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.775619][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.781457][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.786116][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.800865][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.803632][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.806140][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.808838][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.811587][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.814279][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.817693][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.846398][ T5354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.848728][ T5354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.851428][ T5354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.853702][ T5354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.858643][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.860954][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.860965][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.866189][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.922192][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.924283][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.970742][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.972978][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.994350][ T5418] Bluetooth: MGMT ver 1.23 [ 52.189375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.477750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.550076][ T1414] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.729183][ T1414] usb 8-1: Using ep0 maxpacket: 8 [ 52.734882][ T1414] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.744688][ T1414] usb 8-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 52.752020][ T1414] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.754383][ T1414] usb 8-1: Product: syz [ 52.756459][ T1414] usb 8-1: Manufacturer: syz [ 52.763968][ T1414] usb 8-1: SerialNumber: syz [ 52.782187][ T1414] usb 8-1: config 0 descriptor?? [ 52.797133][ T1414] gspca_main: t613-2.14.0 probing 17a1:0128 [ 52.939398][ T67] Bluetooth: hci2: command tx timeout [ 52.940995][ T5358] Bluetooth: hci0: command tx timeout [ 53.071140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.129975][ T1414] gspca_t613: unknown sensor 0000 [ 53.131392][ T1414] t613 8-1:0.0: probe with driver t613 failed with error -22 [ 53.159746][ T1414] usb 8-1: USB disconnect, device number 2 [ 53.209176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.211615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.213844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.319498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.324259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.119533][ T39] audit: type=1326 audit(1726525307.706:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.3.12" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0 [ 54.229401][ T67] Bluetooth: hci1: command tx timeout [ 54.625139][ T5467] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15'. [ 55.019639][ T5358] Bluetooth: hci0: command tx timeout [ 55.021175][ T67] Bluetooth: hci2: command tx timeout [ 55.660021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 56.069701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 56.299396][ T67] Bluetooth: hci1: command tx timeout [ 56.909769][ T5499] netlink: 84 bytes leftover after parsing attributes in process `syz.2.26'. [ 56.940505][ T67] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 56.943482][ T67] Bluetooth: hci3: Injecting HCI hardware error event [ 56.947011][ T67] Bluetooth: hci3: hardware error 0x00 [ 57.109189][ T5358] Bluetooth: hci2: command tx timeout [ 57.109887][ T5353] Bluetooth: hci0: command tx timeout [ 57.754055][ T5520] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 58.394717][ T5528] random: crng reseeded on system resumption [ 58.520618][ T5529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.019117][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 59.213090][ T5532] tmpfs: Bad value for 'mpol' [ 59.479286][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.497257][ T5537] random: crng reseeded on system resumption [ 59.635320][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 59.724930][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 59.736368][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.739311][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 59.750558][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.757071][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 59.759650][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 59.761972][ T25] usb 5-1: Product: syz [ 59.763116][ T25] usb 5-1: Manufacturer: syz [ 59.785025][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 59.786478][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 59.799836][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 59.801478][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 60.085808][ T35] usb 5-1: USB disconnect, device number 2 [ 60.152686][ T5541] Zero length message leads to an empty skb [ 60.386935][ T39] audit: type=1326 audit(1726525313.976:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.1.41" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 62.374594][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 62.552985][ T5572] tmpfs: Bad value for 'mpol' [ 63.323459][ T5576] block nbd3: shutting down sockets [ 63.518796][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 66.863308][ T5639] random: crng reseeded on system resumption [ 67.003325][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 67.715153][ T5645] tmpfs: Bad value for 'mpol' [ 69.667302][ T5665] random: crng reseeded on system resumption [ 69.864103][ T39] audit: type=1800 audit(1726525323.446:4): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.77" name="bus" dev="overlay" ino=104 res=0 errno=0 [ 70.293450][ T5677] block nbd3: shutting down sockets [ 70.862393][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.865530][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.952313][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.149514][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 71.158358][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.166686][ T25] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 71.169742][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.171834][ T25] usb 7-1: Product: syz [ 71.173298][ T25] usb 7-1: Manufacturer: syz [ 71.174515][ T25] usb 7-1: SerialNumber: syz [ 71.177714][ T25] usb 7-1: config 0 descriptor?? [ 71.185333][ T25] gspca_main: t613-2.14.0 probing 17a1:0128 [ 71.473267][ T25] gspca_t613: unknown sensor 0000 [ 71.475021][ T25] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 71.488730][ T25] usb 7-1: USB disconnect, device number 2 [ 71.577848][ T5686] block nbd1: shutting down sockets [ 72.236844][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 73.121409][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 74.339863][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.539343][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 74.552260][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.556627][ T63] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 74.558999][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.561267][ T63] usb 5-1: Product: syz [ 74.562388][ T63] usb 5-1: Manufacturer: syz [ 74.563607][ T63] usb 5-1: SerialNumber: syz [ 74.566219][ T63] usb 5-1: config 0 descriptor?? [ 74.570768][ T63] gspca_main: t613-2.14.0 probing 17a1:0128 [ 74.866981][ T63] gspca_t613: unknown sensor 0000 [ 74.868428][ T63] t613 5-1:0.0: probe with driver t613 failed with error -22 [ 74.876041][ T63] usb 5-1: USB disconnect, device number 3 [ 75.059139][ T1414] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.259715][ T1414] usb 6-1: Using ep0 maxpacket: 8 [ 75.268050][ T1414] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.281936][ T1414] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 75.285122][ T1414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.288693][ T1414] usb 6-1: Product: syz [ 75.290929][ T1414] usb 6-1: Manufacturer: syz [ 75.293238][ T1414] usb 6-1: SerialNumber: syz [ 75.312218][ T1414] usb 6-1: config 0 descriptor?? [ 75.315568][ T1414] gspca_main: t613-2.14.0 probing 17a1:0128 [ 75.474539][ T5748] netlink: 84 bytes leftover after parsing attributes in process `syz.3.102'. [ 75.559900][ T1414] gspca_t613: unknown sensor 0000 [ 75.561298][ T1414] t613 6-1:0.0: probe with driver t613 failed with error -22 [ 75.580632][ T1414] usb 6-1: USB disconnect, device number 2 [ 75.692151][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 75.982335][ T65] cfg80211: failed to load regulatory.db [ 76.715819][ T5765] block nbd1: shutting down sockets [ 76.979340][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.179170][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 77.200409][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.219338][ T25] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 77.231011][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.233118][ T25] usb 7-1: Product: syz [ 77.234216][ T25] usb 7-1: Manufacturer: syz [ 77.235440][ T25] usb 7-1: SerialNumber: syz [ 77.239620][ T25] usb 7-1: config 0 descriptor?? [ 77.242751][ T25] gspca_main: t613-2.14.0 probing 17a1:0128 [ 77.404971][ T5774] random: crng reseeded on system resumption [ 77.529779][ T25] gspca_t613: unknown sensor 0000 [ 77.531150][ T25] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 77.549932][ T25] usb 7-1: USB disconnect, device number 3 [ 77.839368][ T1414] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.021042][ T1414] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 78.024130][ T1414] usb 5-1: config 9 has no interfaces? [ 78.027020][ T1414] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 78.029553][ T1414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=14 [ 78.032352][ T1414] usb 5-1: SerialNumber: syz [ 79.614470][ T5796] tmpfs: Bad value for 'mpol' [ 80.567378][ T1414] usb 5-1: USB disconnect, device number 4 [ 80.621652][ T5807] netlink: 84 bytes leftover after parsing attributes in process `syz.2.121'. [ 81.532004][ T5820] netlink: 84 bytes leftover after parsing attributes in process `syz.0.126'. [ 82.661071][ T5830] block nbd2: shutting down sockets [ 82.939327][ T5834] tmpfs: Bad value for 'mpol' [ 84.543278][ T5852] random: crng reseeded on system resumption [ 84.576538][ T5849] block nbd2: shutting down sockets [ 84.656370][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 84.918492][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 85.689214][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.869256][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 85.879600][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.892992][ T35] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 85.896115][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.898473][ T35] usb 5-1: Product: syz [ 85.899970][ T35] usb 5-1: Manufacturer: syz [ 85.901239][ T35] usb 5-1: SerialNumber: syz [ 85.905152][ T35] usb 5-1: config 0 descriptor?? [ 85.912202][ T35] gspca_main: t613-2.14.0 probing 17a1:0128 [ 86.182069][ T35] gspca_t613: unknown sensor 0000 [ 86.183463][ T35] t613 5-1:0.0: probe with driver t613 failed with error -22 [ 86.195097][ T35] usb 5-1: USB disconnect, device number 5 [ 87.575863][ T5903] block nbd3: shutting down sockets [ 88.279239][ T5907] block nbd2: shutting down sockets [ 88.699117][ T5353] Bluetooth: hci2: command tx timeout [ 88.910428][ T5918] netlink: 84 bytes leftover after parsing attributes in process `syz.0.151'. [ 89.632605][ T5926] tmpfs: Bad value for 'mpol' [ 90.477542][ T5931] random: crng reseeded on system resumption [ 90.623111][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 91.349115][ T67] Bluetooth: hci1: command tx timeout [ 92.679251][ T63] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.779505][ T5957] block nbd0: shutting down sockets [ 92.869178][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 92.876400][ T63] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.882061][ T63] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 92.884465][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.886560][ T63] usb 7-1: Product: syz [ 92.887660][ T63] usb 7-1: Manufacturer: syz [ 92.888873][ T63] usb 7-1: SerialNumber: syz [ 92.903197][ T63] usb 7-1: config 0 descriptor?? [ 92.906479][ T63] gspca_main: t613-2.14.0 probing 17a1:0128 [ 93.202789][ T63] gspca_t613: unknown sensor 0000 [ 93.204197][ T63] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 93.209593][ T63] usb 7-1: USB disconnect, device number 4 [ 93.351587][ T5966] random: crng reseeded on system resumption [ 93.394717][ T5961] block nbd3: shutting down sockets [ 93.542485][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 93.924410][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 94.313072][ T5353] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 94.686679][ T5987] random: crng reseeded on system resumption [ 94.989330][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 96.090816][ T6006] block nbd1: shutting down sockets [ 96.510765][ T6015] block nbd0: shutting down sockets [ 96.859174][ T5353] Bluetooth: hci0: command tx timeout [ 97.523587][ T5353] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 98.013624][ T6021] random: crng reseeded on system resumption [ 98.155703][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 99.227322][ T6039] random: crng reseeded on system resumption [ 99.365081][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 99.947936][ T39] audit: type=1326 audit(1726525353.536:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.1.188" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x0 [ 100.323493][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 101.277549][ T6056] random: crng reseeded on system resumption [ 101.447969][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 102.367823][ T6063] random: crng reseeded on system resumption [ 102.371445][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 102.403599][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 103.210605][ T6070] netlink: 84 bytes leftover after parsing attributes in process `syz.0.197'. [ 103.458016][ T39] audit: type=1800 audit(1726525357.046:6): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.200" name="bus" dev="overlay" ino=291 res=0 errno=0 [ 103.893407][ T6081] block nbd2: shutting down sockets [ 105.201529][ T5353] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 105.582239][ T91] Bluetooth: (null): Invalid header checksum [ 105.584131][ T91] Bluetooth: (null): Invalid header checksum [ 105.677100][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.680276][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.682795][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.685658][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.688986][ T67] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.691430][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.693999][ T1160] Bluetooth: (null): Invalid header checksum [ 105.794637][ T6101] chnl_net:caif_netlink_parms(): no params data found [ 105.810619][ T91] Bluetooth: (null): Invalid header checksum [ 105.868685][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.873034][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.875127][ T6101] bridge_slave_0: entered allmulticast mode [ 105.880471][ T6101] bridge_slave_0: entered promiscuous mode [ 105.894168][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.904409][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.906351][ T6101] bridge_slave_1: entered allmulticast mode [ 105.912399][ T6101] bridge_slave_1: entered promiscuous mode [ 105.920631][ T1160] Bluetooth: (null): Invalid header checksum [ 106.017735][ T6101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.033349][ T6101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.154423][ T6100] block nbd2: shutting down sockets [ 106.188690][ T6101] team0: Port device team_slave_0 added [ 106.202802][ T6101] team0: Port device team_slave_1 added [ 106.336911][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.360109][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.396860][ T6101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.414693][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.422707][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.429806][ T6101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.514887][ T6101] hsr_slave_0: entered promiscuous mode [ 106.520898][ T6101] hsr_slave_1: entered promiscuous mode [ 106.525093][ T6101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.527154][ T6101] Cannot create hsr debugfs directory [ 106.683964][ T6101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.775750][ T6101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.886406][ T6101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.979854][ T6101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.159416][ T6101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.196731][ T6101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.220639][ T6101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.260005][ T6101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.354861][ T6101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.367013][ T6101] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.377415][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.379384][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.396865][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.398767][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.651389][ T6101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.692800][ T6101] veth0_vlan: entered promiscuous mode [ 107.716998][ T6101] veth1_vlan: entered promiscuous mode [ 107.739486][ T5353] Bluetooth: hci4: command tx timeout [ 107.745803][ T6101] veth0_macvtap: entered promiscuous mode [ 107.764503][ T6101] veth1_macvtap: entered promiscuous mode [ 107.776466][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.783361][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.786246][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.791203][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.794087][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.797053][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.802103][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.804886][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.810366][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.817756][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.823871][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.826424][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.829525][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.832098][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.834875][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.837892][ T6101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.841882][ T6101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.847070][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.856588][ T6101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.859008][ T6101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.864159][ T6101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.866493][ T6101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.967983][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.970442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.013457][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.015928][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.549313][ T5353] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 109.599395][ T6148] random: crng reseeded on system resumption [ 109.631046][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 109.819317][ T5353] Bluetooth: hci4: command tx timeout [ 110.343537][ T6157] random: crng reseeded on system resumption [ 110.457199][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 110.960155][ T13] Bluetooth: (null): Invalid header checksum [ 110.987358][ T13] Bluetooth: (null): Invalid header checksum [ 111.069159][ T5393] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 111.076177][ T13] Bluetooth: (null): Invalid header checksum [ 111.179830][ T13] Bluetooth: (null): Invalid header checksum [ 111.259285][ T5393] usb 8-1: Using ep0 maxpacket: 8 [ 111.278011][ T5393] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.299407][ T5393] usb 8-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 111.300826][ T45] Bluetooth: (null): Invalid header checksum [ 111.301758][ T5393] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.305445][ T5393] usb 8-1: Product: syz [ 111.306542][ T5393] usb 8-1: Manufacturer: syz [ 111.307768][ T5393] usb 8-1: SerialNumber: syz [ 111.333432][ T5393] usb 8-1: config 0 descriptor?? [ 111.340760][ T5393] gspca_main: t613-2.14.0 probing 17a1:0128 [ 111.400818][ T45] Bluetooth: (null): Invalid header checksum [ 111.419197][ T6174] netlink: 84 bytes leftover after parsing attributes in process `syz.1.228'. [ 111.654746][ T5393] gspca_t613: unknown sensor 0000 [ 111.656550][ T5393] t613 8-1:0.0: probe with driver t613 failed with error -22 [ 111.662159][ T5393] usb 8-1: USB disconnect, device number 3 [ 112.377020][ T6182] netlink: 84 bytes leftover after parsing attributes in process `syz.2.231'. [ 112.595693][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 112.869330][ T5353] Bluetooth: hci4: command tx timeout [ 113.333435][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 113.694732][ T6207] random: crng reseeded on system resumption [ 113.808499][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 113.819149][ T1292] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.999254][ T1292] usb 6-1: Using ep0 maxpacket: 8 [ 114.002094][ T1292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.006774][ T1292] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 114.009620][ T1292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.011779][ T1292] usb 6-1: Product: syz [ 114.012870][ T1292] usb 6-1: Manufacturer: syz [ 114.014155][ T1292] usb 6-1: SerialNumber: syz [ 114.022542][ T1292] usb 6-1: config 0 descriptor?? [ 114.025864][ T1292] gspca_main: t613-2.14.0 probing 17a1:0128 [ 114.259476][ T1292] gspca_t613: unknown sensor 0000 [ 114.269230][ T1292] t613 6-1:0.0: probe with driver t613 failed with error -22 [ 114.273506][ T1292] usb 6-1: USB disconnect, device number 3 [ 115.080421][ T6219] netlink: 84 bytes leftover after parsing attributes in process `syz.0.244'. [ 115.915121][ T6231] random: crng reseeded on system resumption [ 116.309167][ T5350] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 116.502992][ T5350] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.505135][ T5350] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.507736][ T5350] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.510409][ T5350] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.514454][ T5350] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.516789][ T5350] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.518713][ T5350] usb 7-1: Product: syz [ 116.520031][ T5350] usb 7-1: Manufacturer: syz [ 116.532296][ T5350] cdc_wdm 7-1:1.0: skipping garbage [ 116.534489][ T5350] cdc_wdm 7-1:1.0: skipping garbage [ 116.546651][ T5350] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 116.548752][ T5350] cdc_wdm 7-1:1.0: Unknown control protocol [ 116.882671][ T63] usb 7-1: USB disconnect, device number 5 [ 117.326443][ T6239] block nbd0: shutting down sockets [ 117.768135][ T6251] random: crng reseeded on system resumption [ 117.938598][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 118.511561][ T6260] netlink: 'syz.0.257': attribute type 72 has an invalid length. [ 118.513611][ T6260] netlink: 'syz.0.257': attribute type 8 has an invalid length. [ 118.564035][ T6262] overlayfs: missing 'lowerdir' [ 118.721415][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 119.226620][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 119.801913][ T6279] netlink: 84 bytes leftover after parsing attributes in process `syz.0.263'. [ 120.150381][ T6286] random: crng reseeded on system resumption [ 120.160008][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 120.257961][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 121.073971][ T6294] random: crng reseeded on system resumption [ 121.158215][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 121.242666][ T6297] block nbd3: shutting down sockets [ 121.733421][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 122.164909][ T6309] No control pipe specified [ 123.449100][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 123.458132][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 123.649111][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 123.662096][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.674984][ T57] usb 8-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 123.679849][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.682083][ T57] usb 8-1: Product: syz [ 123.684433][ T57] usb 8-1: Manufacturer: syz [ 123.686893][ T57] usb 8-1: SerialNumber: syz [ 123.697567][ T57] usb 8-1: config 0 descriptor?? [ 123.718624][ T57] gspca_main: t613-2.14.0 probing 17a1:0128 [ 123.932606][ T57] gspca_t613: unknown sensor 0000 [ 123.941254][ T57] t613 8-1:0.0: probe with driver t613 failed with error -22 [ 123.956575][ T57] usb 8-1: USB disconnect, device number 4 [ 124.209350][ T6321] random: crng reseeded on system resumption [ 124.651795][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 124.760102][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 124.909159][ T35] usb 8-1: device descriptor read/64, error -71 [ 125.153574][ T67] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.157093][ T67] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.160867][ T67] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.162107][ T6338] random: crng reseeded on system resumption [ 125.165934][ T67] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.169174][ T67] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.171868][ T67] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.201692][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 125.349182][ T35] usb 8-1: device descriptor read/64, error -71 [ 125.403019][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 125.479601][ T35] usb usb8-port1: attempt power cycle [ 125.624325][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.626176][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.628031][ T6335] bridge_slave_0: entered allmulticast mode [ 125.631986][ T6335] bridge_slave_0: entered promiscuous mode [ 125.635699][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.637630][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.642399][ T6335] bridge_slave_1: entered allmulticast mode [ 125.644940][ T6335] bridge_slave_1: entered promiscuous mode [ 125.707189][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.714365][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.767248][ T6335] team0: Port device team_slave_0 added [ 125.771825][ T6335] team0: Port device team_slave_1 added [ 125.813239][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.815044][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.824619][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.829283][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.830986][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.838146][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.922334][ T6335] hsr_slave_0: entered promiscuous mode [ 125.925166][ T6335] hsr_slave_1: entered promiscuous mode [ 125.928841][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.930887][ T6335] Cannot create hsr debugfs directory [ 125.969215][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 125.999796][ T35] usb 8-1: device descriptor read/8, error -71 [ 126.074014][ T6335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.170172][ T6335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.259726][ T6335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.279169][ T35] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 126.313541][ T35] usb 8-1: device descriptor read/8, error -71 [ 126.324485][ T6335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.334089][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 126.441882][ T35] usb usb8-port1: unable to enumerate USB device [ 126.448920][ T6335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.461526][ T6335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.465426][ T6335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.472529][ T6335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.530973][ T65] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.531055][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.533234][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.533247][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.533274][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.543881][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.545297][ T65] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.548517][ T65] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.550317][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.551217][ T65] usb 7-1: Product: syz [ 126.552420][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.554243][ T65] usb 7-1: Manufacturer: syz [ 126.561532][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 126.562814][ T65] cdc_wdm 7-1:1.0: skipping garbage [ 126.563191][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.565848][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.572986][ T65] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 126.575176][ T65] cdc_wdm 7-1:1.0: Unknown control protocol [ 126.693990][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.726061][ T6335] veth0_vlan: entered promiscuous mode [ 126.734968][ T6335] veth1_vlan: entered promiscuous mode [ 126.758606][ T6335] veth0_macvtap: entered promiscuous mode [ 126.763416][ T6335] veth1_macvtap: entered promiscuous mode [ 126.777529][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.781327][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.783964][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.786705][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.792328][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.795093][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.797761][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.801230][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.803823][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.806498][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.812699][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.819748][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.822633][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.825442][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.828439][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.831977][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.835586][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.837947][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.840810][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.844173][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.846790][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.854597][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.861477][ T6335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.863836][ T6335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.864216][ T10] usb 7-1: USB disconnect, device number 6 [ 126.866082][ T6335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.866118][ T6335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.922630][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.925116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.941917][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.944588][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.989254][ T6360] random: crng reseeded on system resumption [ 127.259496][ T67] Bluetooth: hci5: command tx timeout [ 127.677707][ T6367] block nbd0: shutting down sockets [ 127.729229][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 127.920201][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 127.927879][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.933516][ T8] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 127.936815][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.941394][ T8] usb 7-1: Product: syz [ 127.944969][ T8] usb 7-1: Manufacturer: syz [ 127.949651][ T8] usb 7-1: SerialNumber: syz [ 127.956265][ T8] usb 7-1: config 0 descriptor?? [ 127.961218][ T8] gspca_main: t613-2.14.0 probing 17a1:0128 [ 128.166717][ T8] gspca_t613: unknown sensor 0000 [ 128.176514][ T8] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 128.206682][ T8] usb 7-1: USB disconnect, device number 7 [ 128.980531][ T6386] block nbd2: shutting down sockets [ 129.349234][ T67] Bluetooth: hci5: command tx timeout [ 129.778212][ T6397] block nbd3: shutting down sockets [ 129.882915][ T6401] netlink: 84 bytes leftover after parsing attributes in process `syz.0.300'. [ 130.876794][ T6415] block nbd2: shutting down sockets [ 131.420670][ T5353] Bluetooth: hci5: command tx timeout [ 131.469576][ T6417] random: crng reseeded on system resumption [ 132.301553][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.304591][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.775872][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 133.499290][ T5353] Bluetooth: hci5: command tx timeout [ 134.244424][ T6452] block nbd0: shutting down sockets [ 135.861292][ T6463] block nbd1: shutting down sockets [ 135.976239][ T6465] random: crng reseeded on system resumption [ 137.605907][ T6487] random: crng reseeded on system resumption [ 137.727672][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 138.035755][ T6492] netlink: 84 bytes leftover after parsing attributes in process `syz.3.326'. [ 138.502507][ T39] audit: type=1326 audit(1726525392.096:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.0.327" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x0 [ 138.725660][ T6499] block nbd3: shutting down sockets [ 138.754704][ T6508] random: crng reseeded on system resumption [ 139.688134][ T6515] block nbd0: shutting down sockets [ 139.745374][ T6519] block nbd1: shutting down sockets [ 141.354359][ T6536] block nbd3: shutting down sockets [ 141.575119][ T39] audit: type=1326 audit(1726525395.166:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.1.339" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 142.500156][ T6553] block nbd1: shutting down sockets [ 142.769257][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.951049][ T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.954818][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.958653][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.969320][ T35] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.982247][ T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.984858][ T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.987239][ T35] usb 5-1: Product: syz [ 142.988467][ T35] usb 5-1: Manufacturer: syz [ 143.002083][ T35] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 143.222248][ T35] usb 5-1: USB disconnect, device number 6 [ 143.519326][ T6560] overlayfs: failed to resolve './file1': -2 [ 144.040092][ T6571] block nbd1: shutting down sockets [ 144.577842][ T39] audit: type=1326 audit(1726525398.166:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.0.349" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x0 [ 144.653567][ T6584] netlink: 84 bytes leftover after parsing attributes in process `syz.3.351'. [ 145.539174][ T1292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.544377][ T6590] block nbd3: shutting down sockets [ 145.719102][ T1292] usb 5-1: Using ep0 maxpacket: 8 [ 145.728278][ T1292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.743565][ T1292] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 145.745958][ T1292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.749243][ T1292] usb 5-1: Product: syz [ 145.750866][ T1292] usb 5-1: Manufacturer: syz [ 145.752275][ T1292] usb 5-1: SerialNumber: syz [ 145.755734][ T1292] usb 5-1: config 0 descriptor?? [ 145.760084][ T1292] gspca_main: t613-2.14.0 probing 17a1:0128 [ 145.981508][ T1292] gspca_t613: unknown sensor 0000 [ 145.983516][ T1292] t613 5-1:0.0: probe with driver t613 failed with error -22 [ 145.993797][ T1292] usb 5-1: USB disconnect, device number 7 [ 146.245286][ T5359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.248099][ T5359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.252184][ T5359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.256201][ T5359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.258538][ T5359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.260873][ T5359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.327963][ T6605] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.466286][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 146.666547][ T5358] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 146.948047][ T6620] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.170534][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.172556][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.174613][ T6602] bridge_slave_0: entered allmulticast mode [ 147.178639][ T6602] bridge_slave_0: entered promiscuous mode [ 147.190498][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.193555][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.195721][ T6602] bridge_slave_1: entered allmulticast mode [ 147.198773][ T6602] bridge_slave_1: entered promiscuous mode [ 147.246955][ T6628] random: crng reseeded on system resumption [ 147.262085][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.284438][ T6624] block nbd3: shutting down sockets [ 147.295463][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.363707][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 147.461306][ T6602] team0: Port device team_slave_0 added [ 147.508784][ T6602] team0: Port device team_slave_1 added [ 147.622090][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.624522][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.649838][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.658927][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.666766][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.674052][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.780782][ T6602] hsr_slave_0: entered promiscuous mode [ 147.787358][ T6602] hsr_slave_1: entered promiscuous mode [ 147.813001][ T6602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.815767][ T6602] Cannot create hsr debugfs directory [ 148.139974][ T6602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.290508][ T6602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.309353][ T5358] Bluetooth: hci6: command tx timeout [ 148.417762][ T6602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.425249][ T6638] evm: overlay not supported [ 148.438199][ T6639] netlink: 240 bytes leftover after parsing attributes in process `syz.0.367'. [ 148.440762][ T6639] netlink: 240 bytes leftover after parsing attributes in process `syz.0.367'. [ 148.499270][ T6602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629225][ T6602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.657495][ T6602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.682118][ T6602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 148.695912][ T6602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.746582][ T6644] block nbd0: shutting down sockets [ 148.796545][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.821304][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.831749][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.833785][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.843137][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.845130][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.196665][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.263987][ T6602] veth0_vlan: entered promiscuous mode [ 149.299758][ T6602] veth1_vlan: entered promiscuous mode [ 149.373731][ T6602] veth0_macvtap: entered promiscuous mode [ 149.380164][ T6602] veth1_macvtap: entered promiscuous mode [ 149.402290][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.405869][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.409351][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.412873][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.415418][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.418128][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.422083][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.425732][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.428944][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.434304][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.437726][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.441593][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.449719][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.458715][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.461957][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.465162][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.468182][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.471955][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.474816][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.478702][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.482274][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.485397][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.489879][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.493006][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.496206][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.500677][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.507661][ T6602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.511085][ T6602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.514076][ T6602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.517242][ T6602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.589772][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.596625][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.598736][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.617911][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.619196][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.620195][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.686823][ T6657] random: crng reseeded on system resumption [ 150.345993][ T6663] FAULT_INJECTION: forcing a failure. [ 150.345993][ T6663] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.351475][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz.0.374 Not tainted 6.11.0-syzkaller-01726-g114143a59589 #0 [ 150.354730][ T6663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.357525][ T6663] Call Trace: [ 150.358381][ T6663] [ 150.359138][ T6663] dump_stack_lvl+0x16c/0x1f0 [ 150.360341][ T6663] should_fail_ex+0x497/0x5b0 [ 150.361549][ T6663] _copy_from_user+0x30/0xf0 [ 150.362872][ T6663] get_compat_msghdr+0xa8/0x170 [ 150.364635][ T6663] ? __pfx_get_compat_msghdr+0x10/0x10 [ 150.366563][ T6663] ? kfree+0x245/0x3b0 [ 150.367776][ T6663] ? find_held_lock+0x2d/0x110 [ 150.368995][ T6663] ___sys_recvmsg+0x193/0x1a0 [ 150.370370][ T6663] ? __pfx____sys_recvmsg+0x10/0x10 [ 150.371707][ T6663] ? __pfx___might_resched+0x10/0x10 [ 150.373073][ T6663] ? __fget_light+0x173/0x210 [ 150.374277][ T6663] do_recvmmsg+0x51a/0x750 [ 150.375421][ T6663] ? __pfx_do_recvmmsg+0x10/0x10 [ 150.376750][ T6663] ? __pfx_lock_release+0x10/0x10 [ 150.378018][ T6663] ? vfs_write+0x14d/0x1140 [ 150.379192][ T6663] __sys_recvmmsg+0x21e/0x280 [ 150.380388][ T6663] ? __pfx___sys_recvmmsg+0x10/0x10 [ 150.381683][ T6663] ? __pfx_ksys_write+0x10/0x10 [ 150.383186][ T6663] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 150.385364][ T6663] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.387204][ T6663] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 150.389074][ T6663] __do_fast_syscall_32+0x73/0x120 [ 150.390438][ T6663] do_fast_syscall_32+0x32/0x80 [ 150.391631][ T6663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.393282][ T6663] RIP: 0023:0xf7f77579 [ 150.393367][ T6666] netlink: 'syz.2.375': attribute type 10 has an invalid length. [ 150.394298][ T6663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.394312][ T6663] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 150.394323][ T6663] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000b40 [ 150.394330][ T6663] RDX: 00000000000005df RSI: 0000000000000002 RDI: 0000000000000000 [ 150.407995][ T6663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.409950][ T6663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.411890][ T6663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.413857][ T6663] [ 150.414855][ T5358] Bluetooth: hci6: command tx timeout [ 150.446848][ T6666] team0: Failed to send options change via netlink (err -105) [ 150.448922][ T6666] team0: Port device netdevsim0 added [ 150.676351][ T6681] random: crng reseeded on system resumption [ 150.779610][ T6678] block nbd0: shutting down sockets [ 150.800725][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 151.371375][ T6691] block nbd3: shutting down sockets [ 151.600061][ T6693] random: crng reseeded on system resumption [ 152.197056][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.203368][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.470323][ T5358] Bluetooth: hci6: command tx timeout [ 153.139750][ T6727] block nbd0: shutting down sockets [ 154.539336][ T5358] Bluetooth: hci6: command tx timeout [ 155.069992][ T6749] can0: slcan on ttyprintk. [ 155.179128][ T5392] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.379250][ T65] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 155.381987][ T5392] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.384285][ T5392] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.386883][ T5392] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.393085][ T5392] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.403144][ T5392] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.405642][ T5392] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.411282][ T5392] usb 5-1: Product: syz [ 155.412992][ T5392] usb 5-1: Manufacturer: syz [ 155.425694][ T5392] cdc_wdm 5-1:1.0: skipping garbage [ 155.449220][ T5392] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 155.579159][ T65] usb 8-1: Using ep0 maxpacket: 8 [ 155.581959][ T65] usb 8-1: config 0 has no interfaces? [ 155.583369][ T65] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.585646][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.592091][ T65] usb 8-1: config 0 descriptor?? [ 155.635284][ T5392] usb 5-1: USB disconnect, device number 8 [ 155.804498][ T65] usb 8-1: USB disconnect, device number 9 [ 155.890234][ T6748] can0 (unregistered): slcan off ttyprintk. [ 156.379755][ T6781] netlink: 84 bytes leftover after parsing attributes in process `syz.0.405'. [ 156.416732][ T6780] block nbd2: shutting down sockets [ 156.900105][ T6791] block nbd3: shutting down sockets [ 157.426996][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 158.003350][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 158.378042][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 158.695462][ T6815] Illegal XDP return value 41 on prog (id 77) dev N/A, expect packet loss! [ 159.238535][ T6836] warning: `syz.0.420' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.265362][ T6840] random: crng reseeded on system resumption [ 159.291521][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 159.294335][ T6836] bridge_slave_1: left allmulticast mode [ 159.295882][ T6836] bridge_slave_1: left promiscuous mode [ 159.298153][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.351187][ T6836] bridge_slave_0: left allmulticast mode [ 159.353235][ T6836] bridge_slave_0: left promiscuous mode [ 159.357355][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.429587][ T6843] block nbd1: shutting down sockets [ 159.473863][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 160.987944][ T6870] mkiss: ax0: crc mode is auto. [ 161.002686][ T6877] pim6reg: entered allmulticast mode [ 161.243184][ T6880] Process accounting resumed [ 161.673375][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 161.863112][ T6890] netlink: 84 bytes leftover after parsing attributes in process `syz.2.436'. [ 162.059650][ T5392] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 162.220001][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 162.255028][ T5392] usb 8-1: Using ep0 maxpacket: 8 [ 162.257999][ T5392] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.262961][ T5392] usb 8-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 162.265367][ T5392] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.267427][ T5392] usb 8-1: Product: syz [ 162.269428][ T5392] usb 8-1: Manufacturer: syz [ 162.277685][ T5392] usb 8-1: SerialNumber: syz [ 162.299724][ T5392] usb 8-1: config 0 descriptor?? [ 162.314385][ T5392] gspca_main: t613-2.14.0 probing 17a1:0128 [ 162.568937][ T5392] gspca_t613: unknown sensor 0000 [ 162.572676][ T5392] t613 8-1:0.0: probe with driver t613 failed with error -22 [ 162.586019][ T5392] usb 8-1: USB disconnect, device number 10 [ 163.144265][ T6899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.579325][ T57] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 163.774412][ T57] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.798178][ T57] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.801072][ T57] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.803518][ T57] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.812255][ T57] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.815389][ T57] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.817533][ T57] usb 8-1: Product: syz [ 163.819003][ T57] usb 8-1: Manufacturer: syz [ 163.842574][ T57] cdc_wdm 8-1:1.0: skipping garbage [ 163.844561][ T57] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 163.950462][ T6923] netlink: 84 bytes leftover after parsing attributes in process `syz.2.448'. [ 164.106113][ T65] usb 8-1: USB disconnect, device number 11 [ 165.106800][ T6934] binder: 6933:6934 ioctl c0306201 20000380 returned -14 [ 165.355836][ T6940] FAULT_INJECTION: forcing a failure. [ 165.355836][ T6940] name failslab, interval 1, probability 0, space 0, times 1 [ 165.359129][ T6940] CPU: 2 UID: 0 PID: 6940 Comm: syz.0.453 Not tainted 6.11.0-syzkaller-01726-g114143a59589 #0 [ 165.361708][ T6940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.364433][ T6940] Call Trace: [ 165.365294][ T6940] [ 165.366046][ T6940] dump_stack_lvl+0x16c/0x1f0 [ 165.367233][ T6940] should_fail_ex+0x497/0x5b0 [ 165.368486][ T6940] ? fs_reclaim_acquire+0xae/0x160 [ 165.369855][ T6940] should_failslab+0xc2/0x120 [ 165.371099][ T6940] __kmalloc_noprof+0xcb/0x410 [ 165.372373][ T6940] kobject_get_path+0xcb/0x230 [ 165.373651][ T6940] kobject_uevent_env+0x289/0x1670 [ 165.375001][ T6940] __kobject_del+0x168/0x1f0 [ 165.376235][ T6940] kobject_put+0x327/0x5a0 [ 165.377378][ T6940] net_rx_queue_update_kobjects+0x478/0x5f0 [ 165.378926][ T6940] netdev_unregister_kobject+0x150/0x270 [ 165.380397][ T6940] unregister_netdevice_many_notify+0x1043/0x1e40 [ 165.382074][ T6940] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 165.383845][ T6940] ? __pfx___lock_acquire+0x10/0x10 [ 165.385198][ T6940] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 165.386797][ T6940] ? is_bpf_text_address+0x94/0x1a0 [ 165.388164][ T6940] ? aa_get_newest_label+0x376/0x680 [ 165.389557][ T6940] ? __pfx_aa_get_newest_label+0x10/0x10 [ 165.391031][ T6940] unregister_netdevice_queue+0x307/0x3f0 [ 165.392527][ T6940] ? apparmor_capable+0x114/0x1d0 [ 165.393842][ T6940] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 165.395487][ T6940] ? security_capable+0x98/0xd0 [ 165.396869][ T6940] ip6gre_tunnel_siocdevprivate+0x51e/0xc80 [ 165.398424][ T6940] ? kasan_save_track+0x14/0x30 [ 165.399737][ T6940] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 165.401426][ T6940] ? lock_acquire+0x1b1/0x560 [ 165.402676][ T6940] ? __pfx___mutex_trylock_common+0x10/0x10 [ 165.404239][ T6940] ? full_name_hash+0xbc/0x110 [ 165.405498][ T6940] ? netdev_name_node_lookup+0xf0/0x140 [ 165.406915][ T6940] dev_ifsioc+0x529/0x10b0 [ 165.408029][ T6940] ? __pfx_dev_ifsioc+0x10/0x10 [ 165.409304][ T6940] ? dev_ioctl+0x1a1/0x10c0 [ 165.410486][ T6940] ? __pfx___mutex_lock+0x10/0x10 [ 165.411823][ T6940] ? __pfx_lock_release+0x10/0x10 [ 165.413146][ T6940] ? netdev_name_node_lookup_rcu+0xf0/0x140 [ 165.414693][ T6940] dev_ioctl+0x1b2/0x10c0 [ 165.415835][ T6940] sock_ioctl+0x5bf/0x6c0 [ 165.416969][ T6940] ? __pfx_sock_ioctl+0x10/0x10 [ 165.418244][ T6940] ? vfs_fileattr_set+0xb61/0xc00 [ 165.419572][ T6940] ? __pfx_lock_release+0x10/0x10 [ 165.420884][ T6940] compat_sock_ioctl+0x61f/0x7f0 [ 165.422182][ T6940] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 165.423617][ T6940] ? __fget_files+0x256/0x400 [ 165.424846][ T6940] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 165.426286][ T6940] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 165.427705][ T6940] __do_compat_sys_ioctl+0x2c3/0x330 [ 165.429084][ T6940] __do_fast_syscall_32+0x73/0x120 [ 165.430403][ T6940] do_fast_syscall_32+0x32/0x80 [ 165.431789][ T6940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.433462][ T6940] RIP: 0023:0xf7f77579 [ 165.434543][ T6940] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.439515][ T6940] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 165.441691][ T6940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f2 [ 165.443758][ T6940] RDX: 0000000020000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.445815][ T6940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.447884][ T6940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.449938][ T6940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.452008][ T6940] [ 165.453296][ C2] hpet: Lost 5 RTC interrupts [ 165.469300][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 165.622751][ T6944] syz.2.454 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 165.896580][ T6953] netlink: 84 bytes leftover after parsing attributes in process `syz.2.457'. [ 166.539177][ T5350] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.722601][ T5350] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.731683][ T5350] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.734371][ T5350] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.737825][ T5350] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.742796][ T5350] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.747897][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.755737][ T5350] usb 6-1: Product: syz [ 166.758077][ T5350] usb 6-1: Manufacturer: syz [ 166.770551][ T5350] cdc_wdm 6-1:1.0: skipping garbage [ 166.771959][ T5350] cdc_wdm 6-1:1.0: skipping garbage [ 166.773321][ T5350] cdc_wdm 6-1:1.0: skipping garbage [ 166.782475][ T5350] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 166.835838][ T6963] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 166.838800][ T6963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.460'. [ 166.986292][ T35] usb 6-1: USB disconnect, device number 4 [ 167.189187][ T5350] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 167.389170][ T5350] usb 7-1: Using ep0 maxpacket: 8 [ 167.400756][ T5350] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.410834][ T5350] usb 7-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 167.413226][ T5350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.415355][ T5350] usb 7-1: Product: syz [ 167.416358][ T5350] usb 7-1: Manufacturer: syz [ 167.417526][ T5350] usb 7-1: SerialNumber: syz [ 167.421813][ T5350] usb 7-1: config 0 descriptor?? [ 167.425772][ T5350] gspca_main: t613-2.14.0 probing 17a1:0128 [ 167.631027][ T5350] gspca_t613: unknown sensor 0000 [ 167.632456][ T5350] t613 7-1:0.0: probe with driver t613 failed with error -22 [ 167.640981][ T5350] usb 7-1: USB disconnect, device number 8 [ 167.657659][ T6975] FAULT_INJECTION: forcing a failure. [ 167.657659][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 167.673252][ T6975] CPU: 2 UID: 0 PID: 6975 Comm: syz.1.463 Not tainted 6.11.0-syzkaller-01726-g114143a59589 #0 [ 167.676509][ T6975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.680089][ T6975] Call Trace: [ 167.681179][ T6975] [ 167.682190][ T6975] dump_stack_lvl+0x16c/0x1f0 [ 167.683826][ T6975] should_fail_ex+0x497/0x5b0 [ 167.685408][ T6975] ? fs_reclaim_acquire+0xae/0x160 [ 167.687157][ T6975] should_failslab+0xc2/0x120 [ 167.688776][ T6975] __kmalloc_noprof+0xcb/0x410 [ 167.690418][ T6975] ? __pfx_lock_acquire+0x10/0x10 [ 167.692466][ T6975] tomoyo_realpath_from_path+0xbf/0x710 [ 167.694343][ T6975] ? tomoyo_profile+0x47/0x60 [ 167.695867][ T6975] tomoyo_path_number_perm+0x245/0x5b0 [ 167.697314][ T6975] ? tomoyo_path_number_perm+0x232/0x5b0 [ 167.699068][ T6975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.700646][ T6975] ? __pfx_lock_release+0x10/0x10 [ 167.701953][ T6975] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.703564][ T6975] ? __fget_files+0x256/0x400 [ 167.704824][ T6975] security_file_ioctl_compat+0x75/0xc0 [ 167.706290][ T6975] __do_compat_sys_ioctl+0x5d/0x330 [ 167.707784][ T6975] __do_fast_syscall_32+0x73/0x120 [ 167.709357][ T6975] do_fast_syscall_32+0x32/0x80 [ 167.711023][ T6975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.713169][ T6975] RIP: 0023:0xf747e579 [ 167.714556][ T6975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.721080][ T6975] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 167.723909][ T6975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c008ae05 [ 167.726496][ T6975] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.728579][ T6975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.730828][ T6975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 167.732942][ T6975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.735025][ T6975] [ 167.736513][ C2] hpet: Lost 4 RTC interrupts [ 167.744215][ T6975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.308073][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 168.527962][ T39] audit: type=1326 audit(1726525422.116:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.3.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7fc00000 [ 168.750449][ T6999] netlink: 84 bytes leftover after parsing attributes in process `syz.1.467'. [ 168.999117][ T6998] block nbd0: shutting down sockets [ 169.122883][ T7003] pim6reg: entered allmulticast mode [ 169.136579][ T7003] pim6reg: left allmulticast mode [ 169.201118][ T7006] input: syz0 as /devices/virtual/input/input15 [ 169.264055][ T7008] FAULT_INJECTION: forcing a failure. [ 169.264055][ T7008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.264101][ T7008] [ 169.264104][ T7008] ====================================================== [ 169.264107][ T7008] WARNING: possible circular locking dependency detected [ 169.264110][ T7008] 6.11.0-syzkaller-01726-g114143a59589 #0 Not tainted [ 169.264116][ T7008] ------------------------------------------------------ [ 169.264118][ T7008] syz.1.472/7008 is trying to acquire lock: [ 169.264123][ T7008] ffffffff8dda7698 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 [ 169.264146][ T7008] [ 169.264146][ T7008] but task is already holding lock: [ 169.264148][ T7008] ffff88802b83eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 169.264169][ T7008] [ 169.264169][ T7008] which lock already depends on the new lock. [ 169.264169][ T7008] [ 169.264171][ T7008] [ 169.264171][ T7008] the existing dependency chain (in reverse order) is: [ 169.264173][ T7008] [ 169.264173][ T7008] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 169.264183][ T7008] _raw_spin_lock_nested+0x31/0x40 [ 169.264195][ T7008] raw_spin_rq_lock_nested+0x29/0x130 [ 169.264206][ T7008] task_fork_fair+0x73/0x250 [ 169.264215][ T7008] sched_cgroup_fork+0x3cf/0x510 [ 169.264223][ T7008] copy_process+0x4710/0x6f50 [ 169.264232][ T7008] kernel_clone+0xfd/0x960 [ 169.264240][ T7008] user_mode_thread+0xb4/0xf0 [ 169.264249][ T7008] rest_init+0x23/0x2b0 [ 169.264258][ T7008] start_kernel+0x3df/0x4c0 [ 169.264269][ T7008] x86_64_start_reservations+0x18/0x30 [ 169.264280][ T7008] x86_64_start_kernel+0xb2/0xc0 [ 169.264290][ T7008] common_startup_64+0x13e/0x148 [ 169.264299][ T7008] [ 169.264299][ T7008] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 169.264308][ T7008] _raw_spin_lock_irqsave+0x3a/0x60 [ 169.264319][ T7008] try_to_wake_up+0x9a/0x13e0 [ 169.264329][ T7008] up+0x79/0xb0 [ 169.264336][ T7008] console_unlock+0x23e/0x290 [ 169.264349][ T7008] vga_remove_vgacon+0x90/0xd0 [ 169.264361][ T7008] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 169.264372][ T7008] bochs_pci_probe+0x101/0x1150 [ 169.264382][ T7008] local_pci_probe+0xde/0x1b0 [ 169.264391][ T7008] pci_device_probe+0x29d/0x7b0 [ 169.264400][ T7008] really_probe+0x23e/0xa90 [ 169.264410][ T7008] __driver_probe_device+0x1de/0x440 [ 169.264419][ T7008] driver_probe_device+0x4c/0x1b0 [ 169.264429][ T7008] __driver_attach+0x283/0x580 [ 169.264438][ T7008] bus_for_each_dev+0x13c/0x1d0 [ 169.264446][ T7008] bus_add_driver+0x2e9/0x690 [ 169.264454][ T7008] driver_register+0x15c/0x4b0 [ 169.264465][ T7008] bochs_pci_driver_init+0x67/0x80 [ 169.264476][ T7008] do_one_initcall+0x128/0x630 [ 169.264487][ T7008] kernel_init_freeable+0x660/0xc50 [ 169.264498][ T7008] kernel_init+0x1c/0x2b0 [ 169.264506][ T7008] ret_from_fork+0x45/0x80 [ 169.264518][ T7008] ret_from_fork_asm+0x1a/0x30 [ 169.264529][ T7008] [ 169.264529][ T7008] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 169.264538][ T7008] __lock_acquire+0x24ed/0x3cb0 [ 169.264548][ T7008] lock_acquire+0x1b1/0x560 [ 169.264558][ T7008] _raw_spin_lock_irqsave+0x3a/0x60 [ 169.264569][ T7008] down_trylock+0x12/0x70 [ 169.264576][ T7008] __down_trylock_console_sem+0x40/0x140 [ 169.264587][ T7008] vprintk_emit+0x3d3/0x600 [ 169.264594][ T7008] vprintk+0x7f/0xa0 [ 169.264601][ T7008] _printk+0xc8/0x100 [ 169.264610][ T7008] should_fail_ex+0x46c/0x5b0 [ 169.264621][ T7008] strncpy_from_user+0x38/0x320 [ 169.264631][ T7008] strncpy_from_user_nofault+0x7f/0x180 [ 169.264642][ T7008] bpf_probe_read_user_str+0x26/0x70 [ 169.264654][ T7008] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 169.264660][ T7008] bpf_trace_run4+0x245/0x5a0 [ 169.264669][ T7008] __schedule+0x17cf/0x5490 [ 169.264680][ T7008] preempt_schedule_common+0x44/0xc0 [ 169.264692][ T7008] preempt_schedule_thunk+0x1a/0x30 [ 169.264699][ T7008] __mutex_lock+0x2cc/0x9c0 [ 169.264706][ T7008] kernfs_seq_start+0x4d/0x240 [ 169.264715][ T7008] seq_read_iter+0x2b1/0x12c0 [ 169.264723][ T7008] kernfs_fop_read_iter+0x41a/0x590 [ 169.264731][ T7008] vfs_read+0x869/0xbd0 [ 169.264741][ T7008] ksys_read+0x12f/0x260 [ 169.264749][ T7008] __do_fast_syscall_32+0x73/0x120 [ 169.264757][ T7008] do_fast_syscall_32+0x32/0x80 [ 169.264765][ T7008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.264777][ T7008] [ 169.264777][ T7008] other info that might help us debug this: [ 169.264777][ T7008] [ 169.264779][ T7008] Chain exists of: [ 169.264779][ T7008] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 169.264779][ T7008] [ 169.264789][ T7008] Possible unsafe locking scenario: [ 169.264789][ T7008] [ 169.264791][ T7008] CPU0 CPU1 [ 169.264793][ T7008] ---- ---- [ 169.264794][ T7008] lock(&rq->__lock); [ 169.264799][ T7008] lock(&p->pi_lock); [ 169.264803][ T7008] lock(&rq->__lock); [ 169.264808][ T7008] lock((console_sem).lock); [ 169.264812][ T7008] [ 169.264812][ T7008] *** DEADLOCK *** [ 169.264812][ T7008] [ 169.264814][ T7008] 5 locks held by syz.1.472/7008: [ 169.264818][ T7008] #0: ffff88802362ab48 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xeb/0x180 [ 169.264838][ T7008] #1: ffff888067dd3b38 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xde/0x12c0 [ 169.264854][ T7008] #2: ffff888062da1c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4d/0x240 [ 169.264872][ T7008] #3: ffff88802b83eb98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 169.264892][ T7008] #4: ffffffff8ddb9560 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 169.264911][ T7008] [ 169.264911][ T7008] stack backtrace: [ 169.264913][ T7008] CPU: 3 UID: 0 PID: 7008 Comm: syz.1.472 Not tainted 6.11.0-syzkaller-01726-g114143a59589 #0 [ 169.264923][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.264928][ T7008] Call Trace: [ 169.264931][ T7008] [ 169.264935][ T7008] dump_stack_lvl+0x116/0x1f0 [ 169.264947][ T7008] check_noncircular+0x31a/0x400 [ 169.264958][ T7008] ? __pfx_check_noncircular+0x10/0x10 [ 169.264969][ T7008] ? __pfx__prb_read_valid+0x10/0x10 [ 169.264982][ T7008] ? __pfx_format_decode+0x10/0x10 [ 169.264992][ T7008] ? lockdep_lock+0xc6/0x200 [ 169.265000][ T7008] ? __pfx_lockdep_lock+0x10/0x10 [ 169.265009][ T7008] ? vsnprintf+0x40f/0x1870 [ 169.265019][ T7008] __lock_acquire+0x24ed/0x3cb0 [ 169.265032][ T7008] ? __pfx___lock_acquire+0x10/0x10 [ 169.265044][ T7008] ? vprintk_store+0x222/0xbb0 [ 169.265057][ T7008] lock_acquire+0x1b1/0x560 [ 169.265067][ T7008] ? down_trylock+0x12/0x70 [ 169.265077][ T7008] ? __pfx_lock_acquire+0x10/0x10 [ 169.265087][ T7008] ? __pfx_hlock_conflict+0x10/0x10 [ 169.265097][ T7008] ? hlock_class+0x4e/0x130 [ 169.265106][ T7008] ? vprintk+0x7f/0xa0 [ 169.265114][ T7008] _raw_spin_lock_irqsave+0x3a/0x60 [ 169.265126][ T7008] ? down_trylock+0x12/0x70 [ 169.265135][ T7008] down_trylock+0x12/0x70 [ 169.265144][ T7008] __down_trylock_console_sem+0x40/0x140 [ 169.265156][ T7008] vprintk_emit+0x3d3/0x600 [ 169.265165][ T7008] vprintk+0x7f/0xa0 [ 169.265173][ T7008] _printk+0xc8/0x100 [ 169.265184][ T7008] ? __pfx__printk+0x10/0x10 [ 169.265194][ T7008] ? __pfx___lock_acquire+0x10/0x10 [ 169.265204][ T7008] ? ___ratelimit+0x24c/0x580 [ 169.265215][ T7008] ? __pfx____ratelimit+0x10/0x10 [ 169.265226][ T7008] should_fail_ex+0x46c/0x5b0 [ 169.265238][ T7008] strncpy_from_user+0x38/0x320 [ 169.265250][ T7008] strncpy_from_user_nofault+0x7f/0x180 [ 169.265261][ T7008] bpf_probe_read_user_str+0x26/0x70 [ 169.265275][ T7008] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 169.265281][ T7008] bpf_trace_run4+0x245/0x5a0 [ 169.265292][ T7008] ? __pfx_bpf_trace_run4+0x10/0x10 [ 169.265302][ T7008] ? psi_task_switch+0x20c/0x900 [ 169.265313][ T7008] __schedule+0x17cf/0x5490 [ 169.265327][ T7008] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.265341][ T7008] ? __pfx___schedule+0x10/0x10 [ 169.265356][ T7008] ? preempt_schedule_thunk+0x1a/0x30 [ 169.265364][ T7008] preempt_schedule_common+0x44/0xc0 [ 169.265377][ T7008] preempt_schedule_thunk+0x1a/0x30 [ 169.265387][ T7008] __mutex_lock+0x2cc/0x9c0 [ 169.265396][ T7008] ? kernfs_seq_start+0x4d/0x240 [ 169.265406][ T7008] ? __pfx___mutex_lock+0x10/0x10 [ 169.265415][ T7008] ? rcu_is_watching+0x12/0xc0 [ 169.265428][ T7008] ? trace_kmalloc+0x2d/0xe0 [ 169.265440][ T7008] ? __kmalloc_node_noprof+0x22f/0x440 [ 169.265451][ T7008] ? kernfs_seq_start+0x4d/0x240 [ 169.265460][ T7008] kernfs_seq_start+0x4d/0x240 [ 169.265469][ T7008] ? __kvmalloc_node_noprof+0x7c/0x1a0 [ 169.265479][ T7008] seq_read_iter+0x2b1/0x12c0 [ 169.265489][ T7008] kernfs_fop_read_iter+0x41a/0x590 [ 169.265499][ T7008] ? rw_verify_area+0xd0/0x6c0 [ 169.265509][ T7008] vfs_read+0x869/0xbd0 [ 169.265520][ T7008] ? __pfx_vfs_read+0x10/0x10 [ 169.265529][ T7008] ? __pfx___mutex_lock+0x10/0x10 [ 169.265539][ T7008] ? __fget_files+0x256/0x400 [ 169.265550][ T7008] ksys_read+0x12f/0x260 [ 169.265560][ T7008] ? __pfx_ksys_read+0x10/0x10 [ 169.265572][ T7008] __do_fast_syscall_32+0x73/0x120 [ 169.265581][ T7008] do_fast_syscall_32+0x32/0x80 [ 169.265590][ T7008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.265602][ T7008] RIP: 0023:0xf747e579 [ 169.265609][ T7008] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.265616][ T7008] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 169.265624][ T7008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 169.265629][ T7008] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.265634][ T7008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.265639][ T7008] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.265644][ T7008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.265652][ T7008] [ 169.520151][ T7008] CPU: 3 UID: 0 PID: 7008 Comm: syz.1.472 Not tainted 6.11.0-syzkaller-01726-g114143a59589 #0 [ 169.522799][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.525606][ T7008] Call Trace: [ 169.526495][ T7008] [ 169.527293][ T7008] dump_stack_lvl+0x116/0x1f0 [ 169.528541][ T7008] should_fail_ex+0x497/0x5b0 [ 169.529788][ T7008] strncpy_from_user+0x38/0x320 [ 169.531073][ T7008] strncpy_from_user_nofault+0x7f/0x180 [ 169.532553][ T7008] bpf_probe_read_user_str+0x26/0x70 [ 169.533940][ T7008] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 169.535386][ T7008] bpf_trace_run4+0x245/0x5a0 [ 169.536632][ T7008] ? __pfx_bpf_trace_run4+0x10/0x10 [ 169.537997][ T7008] ? psi_task_switch+0x20c/0x900 [ 169.539312][ T7008] __schedule+0x17cf/0x5490 [ 169.540766][ T7008] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.542305][ T7008] ? __pfx___schedule+0x10/0x10 [ 169.543622][ T7008] ? preempt_schedule_thunk+0x1a/0x30 [ 169.545032][ T7008] preempt_schedule_common+0x44/0xc0 [ 169.546420][ T7008] preempt_schedule_thunk+0x1a/0x30 [ 169.547793][ T7008] __mutex_lock+0x2cc/0x9c0 [ 169.548994][ T7008] ? kernfs_seq_start+0x4d/0x240 [ 169.550299][ T7008] ? __pfx___mutex_lock+0x10/0x10 [ 169.551622][ T7008] ? rcu_is_watching+0x12/0xc0 [ 169.552803][ T7008] ? trace_kmalloc+0x2d/0xe0 [ 169.554262][ T7008] ? __kmalloc_node_noprof+0x22f/0x440 [ 169.556107][ T7008] ? kernfs_seq_start+0x4d/0x240 [ 169.557810][ T7008] kernfs_seq_start+0x4d/0x240 [ 169.559450][ T7008] ? __kvmalloc_node_noprof+0x7c/0x1a0 [ 169.561351][ T7008] seq_read_iter+0x2b1/0x12c0 [ 169.562967][ T7008] kernfs_fop_read_iter+0x41a/0x590 [ 169.564745][ T7008] ? rw_verify_area+0xd0/0x6c0 [ 169.566373][ T7008] vfs_read+0x869/0xbd0 [ 169.567816][ T7008] ? __pfx_vfs_read+0x10/0x10 [ 169.569415][ T7008] ? __pfx___mutex_lock+0x10/0x10 [ 169.571116][ T7008] ? __fget_files+0x256/0x400 [ 169.572748][ T7008] ksys_read+0x12f/0x260 [ 169.574186][ T7008] ? __pfx_ksys_read+0x10/0x10 [ 169.575820][ T7008] __do_fast_syscall_32+0x73/0x120 [ 169.577548][ T7008] do_fast_syscall_32+0x32/0x80 [ 169.579195][ T7008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.581324][ T7008] RIP: 0023:0xf747e579 [ 169.582700][ T7008] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.589174][ T7008] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 169.591243][ T7008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000440 [ 169.593211][ T7008] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.595609][ T7008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.597956][ T7008] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.599934][ T7008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.602000][ T7008] [ 169.604217][ C2] hpet: Lost 21 RTC interrupts [ 169.604953][ T7009] uinput: write device info first SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.015984][ T1110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.116926][ T1110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.207562][ T1110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.275579][ T1110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.384660][ T1110] bridge_slave_1: left allmulticast mode [ 170.386178][ T1110] bridge_slave_1: left promiscuous mode [ 170.387722][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.392821][ T1110] bridge_slave_0: left allmulticast mode [ 170.394312][ T1110] bridge_slave_0: left promiscuous mode [ 170.395868][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.510880][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.518593][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.522548][ T1110] bond0 (unregistering): Released all slaves [ 171.014180][ T1110] hsr_slave_0: left promiscuous mode [ 171.017676][ T1110] hsr_slave_1: left promiscuous mode [ 171.020875][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.022830][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.025094][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.027025][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.036470][ T1110] veth1_macvtap: left promiscuous mode [ 171.037960][ T1110] veth0_macvtap: left promiscuous mode [ 171.040194][ T1110] veth1_vlan: left promiscuous mode [ 171.041738][ T1110] veth0_vlan: left promiscuous mode [ 171.271059][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 171.308089][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 171.888327][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.960087][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.015200][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.079338][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.172852][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.243806][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.290289][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.348611][ T1110] team0: Port device netdevsim0 removed [ 172.351350][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.440675][ T1110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.494922][ T1110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.564477][ T1110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.626822][ T1110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.718181][ T1110] bridge_slave_1: left allmulticast mode [ 172.721440][ T1110] bridge_slave_1: left promiscuous mode [ 172.723016][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.725868][ T1110] bridge_slave_0: left allmulticast mode [ 172.727375][ T1110] bridge_slave_0: left promiscuous mode [ 172.728915][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.732689][ T1110] bridge_slave_1: left allmulticast mode [ 172.734184][ T1110] bridge_slave_1: left promiscuous mode [ 172.735730][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.739769][ T1110] bridge_slave_0: left allmulticast mode [ 172.741266][ T1110] bridge_slave_0: left promiscuous mode [ 172.742807][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.060806][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.069571][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.079708][ T1110] bond0 (unregistering): Released all slaves [ 173.087880][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.092184][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.095313][ T1110] bond0 (unregistering): Released all slaves [ 173.104088][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.110103][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.113371][ T1110] bond0 (unregistering): Released all slaves [ 175.339160][ T5358] Bluetooth: hci1: command 0x0406 tx timeout [ 175.342081][ T1110] hsr_slave_0: left promiscuous mode [ 175.346342][ T1110] hsr_slave_1: left promiscuous mode [ 175.349334][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.351845][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.355247][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.357801][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.372758][ T1110] hsr_slave_0: left promiscuous mode [ 175.377140][ T1110] hsr_slave_1: left promiscuous mode [ 175.399383][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.404248][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.408805][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.411792][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.417414][ T1110] hsr_slave_0: left promiscuous mode [ 175.419980][ T1110] hsr_slave_1: left promiscuous mode [ 175.431886][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.433826][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.436128][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.438022][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.444490][ T1110] veth1_macvtap: left promiscuous mode [ 175.445941][ T1110] veth0_macvtap: left promiscuous mode [ 175.447444][ T1110] veth1_vlan: left promiscuous mode [ 175.448847][ T1110] veth0_vlan: left promiscuous mode [ 175.453169][ T1110] veth1_macvtap: left promiscuous mode [ 175.454733][ T1110] veth0_macvtap: left promiscuous mode [ 175.456242][ T1110] veth1_vlan: left promiscuous mode [ 175.457628][ T1110] veth0_vlan: left promiscuous mode [ 175.460289][ T1110] veth1_macvtap: left promiscuous mode [ 175.461709][ T1110] veth0_macvtap: left promiscuous mode [ 175.463178][ T1110] veth1_vlan: left promiscuous mode [ 175.464535][ T1110] veth0_vlan: left promiscuous mode [ 175.789548][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 175.837035][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 176.006462][ T1110] pim6reg (unregistering): left allmulticast mode [ 176.184908][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 176.226428][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 176.591238][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 176.638689][ T1110] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:23:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000040000000 RBX=0000000000000003 RCX=ffffffff813bf4ae RDX=ffffffff8da957c0 RSI=ffffffff813bf4cb RDI=0000000000000000 RBP=ffff88802b83eb80 RSP=ffffffff8da07940 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b63fa40 R15=ffffed1005707d70 RIP=ffffffff813bf4cc RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000006715a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000040000 RBX=0000000000000003 RCX=ffffc9000414a000 RDX=0000000000040000 RSI=ffffffff813bf4cb RDI=0000000000000000 RBP=ffff88802b63eb80 RSP=ffffc9000d7b7558 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b73fa40 R15=ffffed10056c7d70 RIP=ffffffff813bf4cc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000076c3e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff813bf4ae RDX=ffff88801fb92440 RSI=ffffffff813bf4cb RDI=0000000000000000 RBP=ffff88802b83fa54 RSP=ffffc900011178d8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=ffff88802b83fa40 R15=00000000000c0000 RIP=ffffffff813bf4cc RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000006c718000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84faf4a5 RDI=ffffffff9a50a620 RBP=ffffffff9a50a5e0 RSP=ffffc90023a67298 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000030 R14=ffffffff84faf440 R15=0000000000000000 RIP=ffffffff84faf4cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5765fbc CR3=0000000075620000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000