last executing test programs: 16.568809003s ago: executing program 1 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001b00)=ANY=[@ANYBLOB="68010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="49013300d00002000802110000010802110000005050505050500000000007264b060101a6ccc8abc349272ca9f6d2c245fb5f41c6d9ff2d9b25a00416bdc54aaf1d4a6632de092066f62d5f02a7279b910209ad0f9d00cfc0f62a3fc612ac783c9b8e1298316694ad0e9aac269d05c10e5915a4710090fb35ceec9033748809f19c590ba7ab2b4a3bdac10085a419942d861ff3e03a2594f57d79d972939cd1ec6fb82069a32817f0c2f5edfbf707e7b47608b9822fef9262fc0000490ead474b2a59254533fd409785869d9dab21430d2cf7695ee38e3e44a6af76dd256ef5a42825b945fda019d6f7ab3a99ea3b750e65106958e9ce1c3aa391037ec2a74b995240edb4c5a4d5926d2eab08851ca67338314b165f309b1abcc1b907822e04b45ad2fa0263acf205d297398bc16cd87e2f0ec03f106fc1df86ed000000702b2e8019a6d1063d30eaafdcc8329168b58f471ffb4cc92117bf0399d9fd74f064f2c1520e1089c5bc2e464abf9e58fabbab6636a47948893c519bf1ba515a24c26ebeecb30c9c5b00"/405], 0x168}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050040000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100ff0202060270"], 0x2b) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b6933d100", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000101c006300000000000000000070bb0400", @ANYBLOB="8000be000a00020063ccc76963240000"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1, 0x5, 0x18, @local, @mcast1, 0x7800, 0x40, 0x8, 0x10000}}) sendmsg$nl_route_sched(r9, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@deltfilter={0x34, 0x2d, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x51}}, @TCA_CHAIN={0x8, 0xb, 0x4e16}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x7) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r11) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b00)={{r9}, 0x0, 0xc, @unused=[0x9, 0x7, 0x8, 0x80000000], @devid}) getsockname$packet(r11, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 15.264407056s ago: executing program 1 (id=1644): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x2c}}, 0x0) 14.731431051s ago: executing program 1 (id=1647): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f00000004c0), &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x4}, &(0x7f0000000300)) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x1895, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 13.243304956s ago: executing program 1 (id=1651): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001900000000000000000000001d01000005000d00000000009f7508318bfb77f409d52e01e43489db46447ec715b6db36a6ffd394608d961f91a3cf4300faef3bd18260b7399967081480439ec24c88bf420d8459f822b32e452d546505fd2891851387676debdd12e14ec3ec172f80"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x22b}, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000003ac0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)={0xf0, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xd3, 0x5b, "96b2cd68fd67521c5e5bf51ee9bb6ee3702cbd065d2b6e462b8d4bbe86c7406b24b0acca096cd0bc8f07623a7cf3e104baeb2c1018ee2004a4233e571cad8162842bb2e4e93901bdc86de56e054697c323921811230dc63cf8fb6f5524bb5b30f2ea9788af40b3e6ce1efb07c0c1de97e449c4d29b8bdf985e2d2735a5428c109226b625e6bd189c582549e9ad8fa3ac610859dbe3eb68adaa9fca7ae95bb5726455ed9f5f75fd8352dcc93b0604c9f81d91db25f6e494873f6e62f7f2656846b17a96daf785140e6660d634d7693f"}]}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000580)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x3fc, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x3df, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0xf, 0x7}}, 0x100000000, @default, 0x842, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x6d, {0x81, 0xe5, 0x1, "942fa720bf2dea17f7e236d4a56dae5f99f6978f0c9533ef68691147927b99c8ac3c8456e403afbe31046042f69244d95d8452dcf7b4e78b706c6b95f76aed9e6bcc71ab14ec0877da9387f4ca86e8c3174c54dfd2d6aa3a6116d17a974766db92501c6ca21389ea7d26"}}, @val={0x25, 0x3, {0x0, 0xb6, 0x1f}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4f, 0x61}}, @val={0x76, 0x6, {0x3, 0x94, 0x1e}}, [{0xdd, 0x48, "d9704b55beedf1f4ecf184915bf33fc8965f55752f42930b84666bd43c94921c0e9b70946e96dcda1c6d90ceccc343787991bb03cbda1fa6abaa21e20cc5600e6c07116253a72cd3"}, {0xdd, 0x5e, "d88866e4605933d770c68bb2efe45183592e896bedf2f706f06de67e45d816d6a352777ed93cd8fdf43e18932113055aa13a989a80fa5b9b4483969b494ea090a512856c9fcd2ed5c1e0e4167e472ef205807918972db8a9ee360bbd29b8"}, {0xdd, 0x99, "b2137075568daa41de537f1a8fd8d820f137da6fb1a84c99dcce0ca9a9e4b910112f8ba33de4bfec2effb049a88554e742c4b1602eb26281b722abf65f1f7f67c8801e4cc2e74d325da630530a735fab1b0a2eb60b75fa8550d2b1afe4d346277e6f2014a47338f7924343d6f79cafb696bc35355ada38b2fa821f8abf6cf2dc41a8298a87fc39dc60df41f0c725e46a6253b70efe6254d34f"}, {0xdd, 0x9f, "7d56e583f9de40f856d3e3a4b27013cfe61ba225ff954430f7d2143e4e4e362139038d7a55e6d62e66a8e633a7d9012b3f38d172adce64c16e6024898261085462abd1823b836c13e0a1aaa170e786d880c6d870e326b5cc1bf6b33f07c81c1c7d456e0c633ee2cc9e106c9b2d3b0518de5062293e0c77cff83ef7ffe8420e9f23c3307e5d44ca71f15f1f83226eb54eaf9a42f10717a3ecc4dada5d40ed95"}, {0xdd, 0x67, "cc430ab8802ef52905e8ade49e762230e6df1d747626b2bd635c715e243f44e183855cedf1a147b2fedd6be0cb230e6184694892765c549ca1efeca2edfcae098c58943d8de02c76e57beaef1093ebe738451d779ae2c8262938ebf5bdca387b5eb8c473f17ea9"}, {0xdd, 0xce, "f5f26e59483b6b425c7b061a68a228a191a46400c06badfe183e5dda8f4c474381e159bb88a5d7c90ee803e5c9d63d55ca83b41e98cf079d35f146de522963ef64a108b4fe838edd489b92d91af103fd489cba1990289f61d7c8870ffff3667acbbab8006e019f9d96ce2cd5c3a500d982ac80dd2fb5f4b4a1bce6b3a7f53236177b6421a57d646a17f7c4c4cc8da4a319beb703ee3f3f557774b6701a9a9cba41566cddb21d4c4cbc2350ade69e183bf46b0d57c6280698f28eeacdb45cfe41aff178b4171d0175bc365da34994"}]}}]}, 0x3fc}}, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) pipe2$9p(0x0, 0x0) pipe2(&(0x7f0000000040), 0x80080) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) 11.561942591s ago: executing program 2 (id=1653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x10000}, [@exit, @call={0x85, 0x0, 0x0, 0x71}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x6, 0x2, 0x1, 0xfffffffffffffff0}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000e00)=""/2, 0x2}}, 0x11c) r5 = dup2(r2, r1) socket$inet_mptcp(0x2, 0x1, 0x106) read$FUSE(r5, &(0x7f00000043c0)={0x2020}, 0x1e0f) 11.261039651s ago: executing program 1 (id=1656): r0 = open(&(0x7f0000000000)='./file0\x00', 0x66842, 0x0) fstatfs(r0, &(0x7f00000032c0)=""/4086) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000690000012abd7000fed3df250000000000000000080001000100000008000100000000000800010001000000080001000000000008000100010000009959105e0190e876944562bbe7"], 0x40}}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @local}, &(0x7f0000000600)=0xc) r4 = socket(0x1f, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0204000000000000140003006970766c616e310000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="41b2405a21639e279b5673bcce9b90670c32f88cdca7da9685ec14650700fbd074b2d2d382b92b4b6faa7720e2d227f2596bf5f7e4a7775a065eebea35d5edb251afac05e27d0f4a399c8c9d0bc3e2a0641c4671512636755a9e3568ecae8d1b9f7888522e9006cb446034f806f1c135d37d59367498fb8da10577de27c5454eff2b5a07bcb379d9155fdb173b795a3f8c6a5e47702f48643b76c8"], 0x4c}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000c70dea30217fcde6bd361447847d6a1533f8cc489905e48339a95038a199cbe98b26f4882e9f79784f25b1fb98707144f6f2a8c462c6ecc67049bf195b949a185edff81f6b1782ab05db5e8af9e3c30fcc", @ANYRES16=r7, @ANYBLOB="834700000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x840) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) 11.081554292s ago: executing program 0 (id=1657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB], 0x38}}, 0x0) 11.081023246s ago: executing program 2 (id=1658): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000340), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x20}}}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth0_to_bridge\x00', 0x1}, 0x18) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='D', 0x1}, {&(0x7f00000000c0)="d711eccf81", 0x7fffefff}], 0x2}}], 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket(0x0, 0x0, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 10.98196231s ago: executing program 1 (id=1659): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f00000004c0), &(0x7f0000000040)) io_uring_enter(r1, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x52e, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x4}, &(0x7f0000000300)) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x1895, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 10.621635121s ago: executing program 0 (id=1660): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001900000000000000000000001d01000005000d00000000009f7508318bfb77f409d52e01e43489db46447ec715b6db36a6ffd394608d961f91a3cf4300faef3bd18260b7399967081480439ec24c88bf420d8459f822b32e452d546505fd2891851387676debdd12e14ec3ec172f80"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x22b}, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000003ac0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)={0xf0, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xd3, 0x5b, "96b2cd68fd67521c5e5bf51ee9bb6ee3702cbd065d2b6e462b8d4bbe86c7406b24b0acca096cd0bc8f07623a7cf3e104baeb2c1018ee2004a4233e571cad8162842bb2e4e93901bdc86de56e054697c323921811230dc63cf8fb6f5524bb5b30f2ea9788af40b3e6ce1efb07c0c1de97e449c4d29b8bdf985e2d2735a5428c109226b625e6bd189c582549e9ad8fa3ac610859dbe3eb68adaa9fca7ae95bb5726455ed9f5f75fd8352dcc93b0604c9f81d91db25f6e494873f6e62f7f2656846b17a96daf785140e6660d634d7693f"}]}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000580)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x42c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x410, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @initial, {0xf, 0x7}}, 0x100000000, @default, 0x842, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x6d, {0x81, 0xe5, 0x1, "942fa720bf2dea17f7e236d4a56dae5f99f6978f0c9533ef68691147927b99c8ac3c8456e403afbe31046042f69244d95d8452dcf7b4e78b706c6b95f76aed9e6bcc71ab14ec0877da9387f4ca86e8c3174c54dfd2d6aa3a6116d17a974766db92501c6ca21389ea7d26"}}, @val={0x25, 0x3, {0x0, 0xb6, 0x1f}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4f, 0x61}}, @val={0x76, 0x6, {0x3, 0x94, 0x1e}}, [{0xdd, 0x87, "91e64105f15e38f7057460219cf59d53bf96d3e29f46ef2375bb7d95fa52862c2d7cca2bd1c660b6abf50865fb7b0f3f007e0ef0d61025b0d2e67290a689e2e690f8715e7db1222113073c40f82eb6f510aab9d811f0a9dea6d0aaf61c0a4338f58e736027cb534035f2b83e9e2dff0f94dd8848b438d359119ec69beb5a3b22a34e9f57be155d"}, {0xdd, 0x48, "d9704b55beedf1f4ecf184915bf33fc8965f55752f42930b84666bd43c94921c0e9b70946e96dcda1c6d90ceccc343787991bb03cbda1fa6abaa21e20cc5600e6c07116253a72cd3"}, {0xdd, 0x6, "d88866e46059"}, {0xdd, 0x99, "b2137075568daa41de537f1a8fd8d820f137da6fb1a84c99dcce0ca9a9e4b910112f8ba33de4bfec2effb049a88554e742c4b1602eb26281b722abf65f1f7f67c8801e4cc2e74d325da630530a735fab1b0a2eb60b75fa8550d2b1afe4d346277e6f2014a47338f7924343d6f79cafb696bc35355ada38b2fa821f8abf6cf2dc41a8298a87fc39dc60df41f0c725e46a6253b70efe6254d34f"}, {0xdd, 0x9f, "7d56e583f9de40f856d3e3a4b27013cfe61ba225ff954430f7d2143e4e4e362139038d7a55e6d62e66a8e633a7d9012b3f38d172adce64c16e6024898261085462abd1823b836c13e0a1aaa170e786d880c6d870e326b5cc1bf6b33f07c81c1c7d456e0c633ee2cc9e106c9b2d3b0518de5062293e0c77cff83ef7ffe8420e9f23c3307e5d44ca71f15f1f83226eb54eaf9a42f10717a3ecc4dada5d40ed95"}, {0xdd, 0x67, "cc430ab8802ef52905e8ade49e762230e6df1d747626b2bd635c715e243f44e183855cedf1a147b2fedd6be0cb230e6184694892765c549ca1efeca2edfcae098c58943d8de02c76e57beaef1093ebe738451d779ae2c8262938ebf5bdca387b5eb8c473f17ea9"}, {0xdd, 0xce, "f5f26e59483b6b425c7b061a68a228a191a46400c06badfe183e5dda8f4c474381e159bb88a5d7c90ee803e5c9d63d55ca83b41e98cf079d35f146de522963ef64a108b4fe838edd489b92d91af103fd489cba1990289f61d7c8870ffff3667acbbab8006e019f9d96ce2cd5c3a500d982ac80dd2fb5f4b4a1bce6b3a7f53236177b6421a57d646a17f7c4c4cc8da4a319beb703ee3f3f557774b6701a9a9cba41566cddb21d4c4cbc2350ade69e183bf46b0d57c6280698f28eeacdb45cfe41aff178b4171d0175bc365da34994"}]}}]}, 0x42c}}, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) pipe2$9p(0x0, 0x0) pipe2(&(0x7f0000000040), 0x80080) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) 10.447041294s ago: executing program 2 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x38}}, 0x0) 10.060681467s ago: executing program 2 (id=1662): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_enter(0xffffffffffffffff, 0x167c, 0xf2b1, 0x1, &(0x7f0000000500)={[0x2]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a4, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3dc, 0xffffffff, 0xffffffff, 0x3dc, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1b8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @private1, [], [], 'pimreg1\x00', 'wlan1\x00'}, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x500) socket$nl_generic(0x10, 0x3, 0x10) getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) gettid() timer_create(0x2, &(0x7f0000000200)={0x0, 0x8, 0x800000000004, @thr={&(0x7f0000000580)="ff0235b5ac39b4da", &(0x7f0000000680)="b58b3b2e69c7160d629d568594cd51d5e9249e492557a8194d6d8dbd5684569c7330da415206f37b2cddde04e3465ab635d6d28aa4e6367f4b2bb3c83edbafa0cfa2a38402721b564b5c0940b7157a84b54b6d3370c3136ace623b3ab736206266bbf475233f785bceb71fafab16d875d67288732b1350c66dd98693ab34ff47f84b674e006097c3bd06506746202fb1a8586e8de7d782b8c71790403a3ef858b6592df0e4e8f1dd0064489782639fbcf56df43c5113e6d2479532d886cc0c50fede4a979149ee2ff83a4a26cb76c1b24b4cbc"}}, &(0x7f0000bbdffc)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x6f31cc61887d2a0f, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f00000020c0)={0x0, 0x0}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) setuid(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x4}, 0xe) 8.512534814s ago: executing program 0 (id=1663): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f00000000c0)=0x0) timer_gettime(r7, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mount_setattr(r4, 0x0, 0x8000, &(0x7f0000000380)={0x0, 0x8, 0x180000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000cd5000/0x4000)=nil, 0x800000}) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x200000007f, &(0x7f0000000300)=0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz1\x00', 0x200002, 0x0) 5.611989945s ago: executing program 3 (id=1668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a3100"], 0x38}}, 0x0) 5.197399223s ago: executing program 0 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6405ec8500000005000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) gettid() rt_sigqueueinfo(0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x44000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$video(&(0x7f0000000000), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1710c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x4c}}, 0x4008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000001780)={0x0, 0x0, 0x20, 0x16, 0x200, &(0x7f0000000880)="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"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000870000001801000020696c3300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x50, 0x19, 0x403, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "553387af912b0b1f"}, 0x1}}, @CGW_FILTER={0xc}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "6011d36eeeae2678"}}}]}, 0x50}}, 0x0) dup(r5) 4.82173596s ago: executing program 3 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x38}}, 0x0) 4.301577998s ago: executing program 3 (id=1671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6405ec8500000005000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) gettid() rt_sigqueueinfo(0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x44000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_open_dev$video(&(0x7f0000000000), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1710c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x4c}}, 0x4008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000001780)={0x0, 0x0, 0x20, 0x16, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000870000001801000020696c3300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x58, 0x19, 0x403, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "553387af912b0b1f"}, 0x1}}, @CGW_DST_IF={0x8}, @CGW_FILTER={0xc}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "6011d36eeeae2678"}}}]}, 0x58}}, 0x0) dup(r4) 3.721996576s ago: executing program 0 (id=1672): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f4401"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) read(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) dup2(r0, r2) 1.502769647s ago: executing program 3 (id=1673): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x0) fstatfs(r0, &(0x7f00000032c0)=""/4086) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="40000000690000012abd7000fed3df250000000000000000080001000100000008000100000000000800010001000000080001000000000008000100010000009959105e0190e876944562bbe7751f67f540a4fe6bcd4698fe2ea20fec32309e80efa16e2672"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000090) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @local}, &(0x7f0000000600)=0xc) r3 = socket(0x1f, 0x6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0204000000000000140003006970766c616e310000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="41b2405a21639e279b5673bcce9b90670c32f88cdca7da9685ec14650700fbd074b2d2d382b92b4b6faa7720e2d227f2596bf5f7e4a7775a065eebea35d5edb251afac05e27d0f4a399c8c9d0bc3e2a0641c4671512636755a9e3568ecae8d1b9f7888522e9006cb446034f806f1c135d37d59367498fb8da10577de27c5454eff2b5a07bcb379d9155fdb173b795a3f8c6a5e47702f48643b76c8"], 0x4c}}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000c70dea30217fcde6bd361447847d6a1533f8cc489905e48339a95038a199cbe98b26f4882e9f79784f25b1fb98707144f6f2a8c462c6ecc67049bf195b949a185edff81f6b1782ab05db5e8af9e3c30fcc", @ANYRES16=r6, @ANYBLOB="834700000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a800000000001140003006970766c616e310000000000000000001c0012800b1a010069707e6c616e00000c0002800600010000000000"], 0x6c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) 1.180489943s ago: executing program 3 (id=1674): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000340), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x20}}}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'veth0_to_bridge\x00', 0x1}, 0x18) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='D', 0x1}, {&(0x7f00000000c0)="d711eccf81", 0x7fffefff}], 0x2}}], 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket(0x0, 0x0, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 1.100224455s ago: executing program 2 (id=1675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={r2, 0x1000, &(0x7f00000015c0)=""/4096}) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/4078], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x90) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) socket$inet(0x2, 0x4, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000180), &(0x7f0000004640), 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 320.593376ms ago: executing program 0 (id=1677): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f00000000c0)=0x0) timer_gettime(r7, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mount_setattr(r4, 0x0, 0x8000, &(0x7f0000000380)={0x0, 0x8, 0x180000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000cd5000/0x4000)=nil, 0x800000}) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x200000007f, &(0x7f0000000300)=0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz1\x00', 0x200002, 0x0) 161.797026ms ago: executing program 3 (id=1678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a3100"], 0x38}}, 0x0) 0s ago: executing program 2 (id=1679): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_targets\x00') read(r3, &(0x7f0000000000)=""/188, 0xbc) open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) dup2(r0, r2) kernel console output (not intermixed with test programs): erface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.464991][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.470232][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.472873][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.475424][ T8266] bridge_slave_0: entered allmulticast mode [ 183.478289][ T8266] bridge_slave_0: entered promiscuous mode [ 183.486416][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.488898][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.491772][ T8266] bridge_slave_1: entered allmulticast mode [ 183.494679][ T8266] bridge_slave_1: entered promiscuous mode [ 183.501094][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.503502][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.513502][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.591495][ T8266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.610561][ T8266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.744650][ T8266] team0: Port device team_slave_0 added [ 183.751364][ T8266] team0: Port device team_slave_1 added [ 183.837739][ T8260] hsr_slave_0: entered promiscuous mode [ 183.843005][ T8260] hsr_slave_1: entered promiscuous mode [ 183.848766][ T8292] kcapi: manufacturer command 0 unknown. [ 183.861014][ T8260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.863665][ T8260] Cannot create hsr debugfs directory [ 183.911645][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.914008][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.925118][ T8266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.954973][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.957532][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.967867][ T8266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.044817][ T8266] hsr_slave_0: entered promiscuous mode [ 184.047783][ T8266] hsr_slave_1: entered promiscuous mode [ 184.052665][ T8266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.055251][ T8266] Cannot create hsr debugfs directory [ 184.274026][ T8260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.425553][ T8260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.545033][ T8260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.579635][ T5173] Bluetooth: hci3: command tx timeout [ 184.654394][ T8260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.739681][ T5173] Bluetooth: hci0: command tx timeout [ 184.758929][ T8266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.631302][ T8308] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1094'. [ 186.501669][ T5173] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 186.504760][ T5173] Bluetooth: hci1: Injecting HCI hardware error event [ 186.659651][ T5173] Bluetooth: hci3: command tx timeout [ 186.819680][ T5173] Bluetooth: hci0: command 0x041b tx timeout [ 187.510687][ T8266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.602169][ T8266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.722271][ T8266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.809963][ T45] bridge_slave_1: left allmulticast mode [ 187.811929][ T45] bridge_slave_1: left promiscuous mode [ 187.813892][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.835512][ T45] bridge_slave_0: left allmulticast mode [ 187.837849][ T45] bridge_slave_0: left promiscuous mode [ 187.841321][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.691184][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.710026][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.716342][ T45] bond0 (unregistering): Released all slaves [ 188.749620][ T5166] Bluetooth: hci3: command tx timeout [ 188.811915][ T8266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.838426][ T8266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.878860][ T8266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.899776][ T5166] Bluetooth: hci0: command 0x041b tx timeout [ 188.934828][ T8266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.115459][ T8260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.142843][ T8260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.210689][ T8260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.259672][ T8260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.360979][ T45] hsr_slave_0: left promiscuous mode [ 189.389668][ T45] hsr_slave_1: left promiscuous mode [ 189.400531][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.403167][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.410797][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.419702][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.490807][ T45] veth1_macvtap: left promiscuous mode [ 189.492772][ T45] veth0_macvtap: left promiscuous mode [ 189.494723][ T45] veth1_vlan: left promiscuous mode [ 189.496569][ T45] veth0_vlan: left promiscuous mode [ 190.434927][ T45] team0 (unregistering): Port device team_slave_1 removed [ 190.508488][ T45] team0 (unregistering): Port device team_slave_0 removed [ 190.838276][ T5166] Bluetooth: hci3: command tx timeout [ 190.979653][ T5166] Bluetooth: hci0: command 0x041b tx timeout [ 191.162368][ T8330] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1101'. [ 191.189078][ T8266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.205315][ T8266] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.217519][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.220028][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.254340][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.256906][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.281783][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.314561][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.336181][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.338657][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.356993][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.359437][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.410233][ T35] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 191.419767][ T35] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 191.431070][ T35] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz1 [ 191.524626][ T8266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.573962][ T8266] veth0_vlan: entered promiscuous mode [ 191.584145][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.590252][ T8266] veth1_vlan: entered promiscuous mode [ 191.616275][ T8266] veth0_macvtap: entered promiscuous mode [ 191.622910][ T8266] veth1_macvtap: entered promiscuous mode [ 191.644912][ T8260] veth0_vlan: entered promiscuous mode [ 191.651408][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.655006][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.658402][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.662730][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.667418][ T8266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.673891][ T8260] veth1_vlan: entered promiscuous mode [ 191.678153][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.682328][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.685713][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.689359][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.694716][ T8266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.701255][ T8266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.704434][ T8266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.707530][ T8266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.710814][ T8266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.746353][ T8260] veth0_macvtap: entered promiscuous mode [ 191.757968][ T8260] veth1_macvtap: entered promiscuous mode [ 191.777969][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.782626][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.786145][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.790373][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.793851][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.797490][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.803418][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.815799][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.820974][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.828219][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.832186][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.835528][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.839101][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.842608][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.846084][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.850730][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.863430][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.866131][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.875882][ T8260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.883254][ T8260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.887113][ T8260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.893111][ T8260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.996277][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.999016][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.070438][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.074913][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.249184][ T5166] Bluetooth: hci1: unexpected event for opcode 0x203d [ 192.419620][ T8361] kcapi: manufacturer command 0 unknown. [ 192.612796][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.059817][ T5173] Bluetooth: hci0: command 0x041b tx timeout [ 193.292357][ T8369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1109'. [ 193.504206][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.114960][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.385366][ T35] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 194.392089][ T35] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 194.401931][ T35] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz1 [ 195.102702][ T8390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.141585][ T5166] Bluetooth: hci0: command 0x041b tx timeout [ 195.171203][ T8392] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1118'. [ 195.423610][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.070505][ T1268] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 196.232619][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 196.235144][ T25] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 196.259600][ T5166] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 196.259618][ T1268] usb 7-1: Using ep0 maxpacket: 16 [ 196.262377][ T5166] Bluetooth: hci1: Injecting HCI hardware error event [ 196.299634][ T1268] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.306337][ T25] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz0] on syz1 [ 196.309657][ T1268] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.313868][ T1268] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.316842][ T1268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.349994][ T1268] usb 7-1: config 0 descriptor?? [ 196.559191][ T1268] usbhid 7-1:0.0: can't add hid device: -71 [ 196.569596][ T1268] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 196.578213][ T1268] usb 7-1: USB disconnect, device number 16 [ 196.689190][ T39] audit: type=1800 audit(1719952697.827:87): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1124" name="file0" dev="sda1" ino=1971 res=0 errno=0 [ 197.164058][ T8415] block nbd3: shutting down sockets [ 197.439686][ T5239] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 197.479826][ T8421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.632679][ T5239] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 197.635881][ T5239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.649103][ T5239] usb 7-1: Product: syz [ 197.650660][ T5239] usb 7-1: Manufacturer: syz [ 197.652306][ T5239] usb 7-1: SerialNumber: syz [ 197.655184][ T5239] usb 7-1: config 0 descriptor?? [ 197.864674][ T5239] usb 7-1: USB disconnect, device number 17 [ 198.220250][ T8431] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.264275][ T8431] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.380270][ T39] audit: type=1800 audit(1719952699.527:88): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="file0" dev="sda1" ino=1974 res=0 errno=0 [ 198.961042][ T8445] syz_tun: entered promiscuous mode [ 198.982077][ T8445] batadv_slave_0: entered promiscuous mode [ 198.984714][ T8445] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 198.987315][ T8445] Cannot create hsr debugfs directory [ 199.042629][ T8451] netlink: 'syz.2.1136': attribute type 11 has an invalid length. [ 199.045283][ T8451] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1136'. [ 199.299028][ T8454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.501373][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.130921][ T39] audit: type=1800 audit(1719952701.277:89): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1142" name="file0" dev="sda1" ino=1971 res=0 errno=0 [ 200.290733][ T5166] Bluetooth: hci1: unexpected event for opcode 0x203d [ 200.669941][ T8474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1144'. [ 200.811117][ T5173] Bluetooth: hci3: hardware error 0x20 [ 200.969081][ T8482] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 201.821721][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.863972][ T8488] netlink: 'syz.2.1147': attribute type 11 has an invalid length. [ 201.866716][ T8488] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1147'. [ 201.979315][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 201.983820][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 202.009644][ T35] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz0] on syz1 [ 202.214397][ T8504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1153'. [ 202.278097][ T5171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.282448][ T5171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.285579][ T5171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.289063][ T5171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.319771][ T5171] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.327866][ T5171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.584130][ T8519] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 202.650606][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 202.899906][ T5173] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 202.956119][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.963933][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.968340][ T8506] bridge_slave_0: entered allmulticast mode [ 202.973737][ T8506] bridge_slave_0: entered promiscuous mode [ 202.979229][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.984437][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.987308][ T8506] bridge_slave_1: entered allmulticast mode [ 202.991300][ T8506] bridge_slave_1: entered promiscuous mode [ 203.093869][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.099341][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.203923][ T8506] team0: Port device team_slave_0 added [ 203.214897][ T8506] team0: Port device team_slave_1 added [ 203.346133][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.349262][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.367311][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.375311][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.379164][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.399685][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.459436][ T8506] hsr_slave_0: entered promiscuous mode [ 203.465462][ T8506] hsr_slave_1: entered promiscuous mode [ 203.469828][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.473578][ T8506] Cannot create hsr debugfs directory [ 203.685575][ T8506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.801008][ T8506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.849760][ T55] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 203.914554][ T8506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.036918][ T8506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.051977][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 204.058380][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.069662][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.089619][ T55] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.092764][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.105510][ T55] usb 7-1: config 0 descriptor?? [ 204.222090][ T8506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.226725][ T8506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.233881][ T8506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.238607][ T8506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.321025][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 204.323129][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 204.325501][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.338131][ T55] usb 7-1: USB disconnect, device number 18 [ 204.341650][ T5173] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 204.344361][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.344416][ T5173] Bluetooth: hci1: Injecting HCI hardware error event [ 204.367962][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.370508][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.376458][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.379129][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.429650][ T5173] Bluetooth: hci0: command tx timeout [ 204.617698][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.687613][ T8506] veth0_vlan: entered promiscuous mode [ 204.694291][ T8506] veth1_vlan: entered promiscuous mode [ 204.723549][ T8506] veth0_macvtap: entered promiscuous mode [ 204.728777][ T8506] veth1_macvtap: entered promiscuous mode [ 204.744032][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.747677][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.751514][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.755079][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.758447][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.780140][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.783508][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.787050][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.791762][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.799237][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.809564][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.812924][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.816532][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.829569][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.833223][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.836603][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.840285][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.845297][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.851838][ T8506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.854856][ T8506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.857877][ T8506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.869663][ T8506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.957400][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.979653][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.009866][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.012582][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.301408][ T8546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1161'. [ 205.347673][ T55] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 205.350279][ T55] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 205.354770][ T55] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz1 [ 205.610663][ T8552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.640450][ T8554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.499659][ T5173] Bluetooth: hci0: command tx timeout [ 206.549638][ T5244] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 206.591366][ T8572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1170'. [ 206.749660][ T5244] usb 6-1: Using ep0 maxpacket: 16 [ 206.753232][ T5244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.757750][ T5244] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.765678][ T5244] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.768754][ T5244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.773942][ T5244] usb 6-1: config 0 descriptor?? [ 206.987507][ T5244] usbhid 6-1:0.0: can't add hid device: -71 [ 206.989658][ T5244] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 207.003297][ T5244] usb 6-1: USB disconnect, device number 8 [ 207.125981][ T815] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 207.128961][ T815] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 207.137062][ T815] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz0] on syz1 [ 207.246886][ T8585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.766949][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.425317][ T815] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 208.430395][ T815] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 208.438138][ T815] hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz0] on syz1 [ 208.550744][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.579954][ T5173] Bluetooth: hci0: command tx timeout [ 208.701706][ T8] usb 5-1: device descriptor read/64, error -71 [ 208.734203][ T8616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.774821][ T8618] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 208.969614][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.119640][ T8] usb 5-1: device descriptor read/64, error -71 [ 209.250080][ T8] usb usb5-port1: attempt power cycle [ 209.294753][ T8620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1187'. [ 209.643095][ T8631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.659957][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.693309][ T8] usb 5-1: device descriptor read/8, error -71 [ 209.760262][ T5261] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.762851][ T5261] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.773479][ T5261] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz0] on syz1 [ 209.849243][ T39] audit: type=1800 audit(1719952710.987:90): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1192" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 209.959963][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.991154][ T8] usb 5-1: device descriptor read/8, error -71 [ 210.110855][ T8] usb usb5-port1: unable to enumerate USB device [ 210.215318][ T8645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.659707][ T5173] Bluetooth: hci0: command tx timeout [ 210.820044][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.845087][ T8656] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.002863][ T8] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 211.002884][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.002894][ T8] usb 6-1: Product: syz [ 211.002901][ T8] usb 6-1: Manufacturer: syz [ 211.002909][ T8] usb 6-1: SerialNumber: syz [ 211.012323][ T8] usb 6-1: config 0 descriptor?? [ 211.235114][ T8] usb 6-1: USB disconnect, device number 9 [ 211.306986][ T55] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 211.309487][ T55] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 211.315197][ T55] hid-generic 0000:0000:0000.001A: hidraw1: HID v0.00 Device [syz0] on syz1 [ 211.333187][ T39] audit: type=1800 audit(1719952712.477:91): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1202" name="file0" dev="sda1" ino=1977 res=0 errno=0 [ 211.510869][ T5173] Bluetooth: hci0: hardware error 0x20 [ 211.769771][ T8682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.519827][ T1417] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 212.523276][ T1417] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 212.530216][ T1417] hid-generic 0000:0000:0000.001B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 212.699703][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.849650][ T8] usb 5-1: device descriptor read/64, error -71 [ 212.922912][ T8705] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 213.119708][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.279723][ T8] usb 5-1: device descriptor read/64, error -71 [ 213.399970][ T8] usb usb5-port1: attempt power cycle [ 213.539803][ T5173] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 213.789368][ T39] audit: type=1800 audit(1719952714.927:92): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 213.830290][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.845967][ T8709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.860173][ T8] usb 5-1: device descriptor read/8, error -71 [ 214.129932][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.170970][ T8] usb 5-1: device descriptor read/8, error -71 [ 214.295396][ T8] usb usb5-port1: unable to enumerate USB device [ 214.623828][ T8725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1223'. [ 214.689601][ T1417] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 214.697729][ T1417] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 214.722941][ T1417] hid-generic 0000:0000:0000.001C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 214.898698][ T39] audit: type=1800 audit(1719952716.037:93): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1225" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 215.010192][ T8734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.582245][ T8742] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 215.906134][ T8754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.908744][ T8754] overlayfs: failed to set xattr on upper [ 215.911184][ T8754] overlayfs: ...falling back to redirect_dir=nofollow. [ 215.914089][ T8754] overlayfs: ...falling back to index=off. [ 215.916207][ T8754] overlayfs: ...falling back to uuid=null. [ 216.000419][ T8754] siw: device registration error -23 [ 216.151980][ T39] audit: type=1800 audit(1719952717.297:94): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1234" name="file0" dev="sda1" ino=1978 res=0 errno=0 [ 216.640419][ T8766] kcapi: manufacturer command 0 unknown. [ 217.480402][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.910425][ T8790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1243'. [ 219.720816][ T55] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 219.919670][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 219.925112][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.928737][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.939773][ T55] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.942970][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.952037][ T55] usb 7-1: config 0 descriptor?? [ 220.163913][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 220.167454][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 220.176358][ T55] usb 7-1: USB disconnect, device number 19 [ 220.809648][ T8816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.852405][ T55] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 220.855092][ T55] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 220.865328][ T55] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 220.971151][ T8829] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1252'. [ 221.635827][ T65] Bluetooth: hci1: hardware error 0x20 [ 222.009106][ T8852] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 222.029659][ T8852] overlayfs: failed to set xattr on upper [ 222.039666][ T8852] overlayfs: ...falling back to redirect_dir=nofollow. [ 222.041997][ T8852] overlayfs: ...falling back to index=off. [ 222.044062][ T8852] overlayfs: ...falling back to uuid=null. [ 222.098671][ T8852] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 222.895547][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 222.900795][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 222.930009][ T10] hid-generic 0000:0000:0000.001E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 222.967865][ T39] audit: type=1800 audit(1719952724.107:95): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1264" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 223.114350][ T8875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.162902][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.711805][ T65] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 224.256282][ T8897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1271'. [ 224.479191][ T39] audit: type=1800 audit(1719952725.617:96): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1274" name="file0" dev="sda1" ino=1973 res=0 errno=0 [ 224.685489][ T8911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.699910][ T8909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.092950][ T5173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.098753][ T5173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.113386][ T5173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.140666][ T5173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.150625][ T5173] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.154345][ T5173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.410540][ T8922] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1280'. [ 225.452565][ T8915] chnl_net:caif_netlink_parms(): no params data found [ 225.704811][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.714951][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.724501][ T8915] bridge_slave_0: entered allmulticast mode [ 225.739079][ T8915] bridge_slave_0: entered promiscuous mode [ 225.759477][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.777043][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 225.784322][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.797218][ T8915] bridge_slave_1: entered allmulticast mode [ 225.799447][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 225.806577][ T8915] bridge_slave_1: entered promiscuous mode [ 225.813211][ T35] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 225.954476][ T8915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.982102][ T8915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.069822][ T39] audit: type=1800 audit(1719952727.217:97): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1285" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 226.088321][ T8915] team0: Port device team_slave_0 added [ 226.103352][ T8915] team0: Port device team_slave_1 added [ 226.228941][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.238325][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.260200][ T8915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.265477][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.267786][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.281854][ T8915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.306847][ T8943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.393742][ T8915] hsr_slave_0: entered promiscuous mode [ 226.416606][ T8915] hsr_slave_1: entered promiscuous mode [ 226.419071][ T8915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.422718][ T8915] Cannot create hsr debugfs directory [ 226.725900][ T8915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.866881][ T8915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.937149][ T6620] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 226.941403][ T6620] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 226.947274][ T6620] hid-generic 0000:0000:0000.0020: hidraw1: HID v0.00 Device [syz0] on syz1 [ 227.003960][ T8915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.048090][ T8961] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1292'. [ 227.122570][ T8915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.229699][ T65] Bluetooth: hci4: command tx timeout [ 227.319974][ T8915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.415357][ T39] audit: type=1800 audit(1719952728.557:98): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1295" name="file0" dev="sda1" ino=1978 res=0 errno=0 [ 227.429662][ T8915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.435965][ T8915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.469379][ T8915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.626500][ T8915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.646540][ T8915] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.665898][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.668281][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.693438][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.696124][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.025385][ T8985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1300'. [ 228.039766][ T35] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 228.056430][ T8915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.140260][ T8915] veth0_vlan: entered promiscuous mode [ 228.147027][ T8915] veth1_vlan: entered promiscuous mode [ 228.178412][ T25] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 228.181293][ T8915] veth0_macvtap: entered promiscuous mode [ 228.181424][ T25] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 228.188449][ T25] hid-generic 0000:0000:0000.0021: hidraw1: HID v0.00 Device [syz0] on syz1 [ 228.202710][ T8915] veth1_macvtap: entered promiscuous mode [ 228.213956][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.217490][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.222118][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.225579][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.229008][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.232776][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.236105][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.239873][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.243080][ T35] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 228.243104][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.246443][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.250175][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.255496][ T35] usb 5-1: Product: syz [ 228.258540][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.263574][ T35] usb 5-1: Manufacturer: syz [ 228.265188][ T35] usb 5-1: SerialNumber: syz [ 228.266101][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.271365][ T35] usb 5-1: config 0 descriptor?? [ 228.271888][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.276414][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.287762][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.291560][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.300107][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.303405][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.319568][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.322790][ T8915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.326193][ T8915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.331829][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.339145][ T8915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.343156][ T8915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.346804][ T8915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.350077][ T8915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.419732][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.422426][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.430138][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.436184][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.479148][ T35] usb 5-1: USB disconnect, device number 18 [ 228.502972][ T8994] syz_tun: entered promiscuous mode [ 228.505478][ T8994] batadv_slave_0: entered promiscuous mode [ 228.507884][ T8994] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 228.511436][ T8994] Cannot create hsr debugfs directory [ 228.515919][ T8994] netlink: 'syz.1.1278': attribute type 11 has an invalid length. [ 228.518600][ T8994] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1278'. [ 228.598549][ T39] audit: type=1800 audit(1719952729.737:99): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1306" name="file0" dev="sda1" ino=1982 res=0 errno=0 [ 228.715990][ T9009] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1308'. [ 228.824645][ T4659] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 228.836841][ T4659] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 228.845983][ T4659] hid-generic 0000:0000:0000.0022: hidraw1: HID v0.00 Device [syz0] on syz1 [ 229.110030][ T9023] kcapi: manufacturer command 0 unknown. [ 229.299613][ T5173] Bluetooth: hci4: command tx timeout [ 230.174846][ T9045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1319'. [ 231.379698][ T5173] Bluetooth: hci4: command 0x040f tx timeout [ 232.185799][ T5261] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 232.188328][ T5261] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 232.211639][ T5261] hid-generic 0000:0000:0000.0023: hidraw1: HID v0.00 Device [syz0] on syz1 [ 232.649641][ T5244] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 232.833713][ T5244] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 232.836928][ T5244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.839754][ T5244] usb 7-1: Product: syz [ 232.841230][ T5244] usb 7-1: Manufacturer: syz [ 232.849693][ T5244] usb 7-1: SerialNumber: syz [ 232.860785][ T5244] usb 7-1: config 0 descriptor?? [ 233.225043][ T9081] kcapi: manufacturer command 0 unknown. [ 233.355919][ T55] usb 7-1: USB disconnect, device number 20 [ 233.395861][ T39] audit: type=1800 audit(1719952734.537:100): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1332" name="file0" dev="sda1" ino=1981 res=0 errno=0 [ 233.459748][ T5173] Bluetooth: hci4: command 0x040f tx timeout [ 234.155180][ T9098] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 234.649573][ T39] audit: type=1800 audit(1719952735.787:101): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1341" name="file0" dev="sda1" ino=1969 res=0 errno=0 [ 235.119957][ T5239] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 235.322116][ T5239] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 235.326458][ T5239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.349625][ T5239] usb 6-1: Product: syz [ 235.359668][ T5239] usb 6-1: Manufacturer: syz [ 235.361711][ T5239] usb 6-1: SerialNumber: syz [ 235.400292][ T5239] usb 6-1: config 0 descriptor?? [ 235.540148][ T5173] Bluetooth: hci4: command 0x040f tx timeout [ 236.058219][ T55] usb 6-1: USB disconnect, device number 10 [ 236.237730][ T9127] netlink: 'syz.2.1345': attribute type 11 has an invalid length. [ 236.265724][ T9127] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1345'. [ 236.973301][ T9148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.629889][ T5173] Bluetooth: hci4: command 0x040f tx timeout [ 238.149261][ T9173] netlink: 'syz.3.1354': attribute type 11 has an invalid length. [ 238.155561][ T9173] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1354'. [ 238.289617][ T25] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 238.469580][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 238.469656][ T35] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.472760][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.477778][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.489596][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.496400][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.509613][ T25] usb 7-1: config 0 descriptor?? [ 238.575879][ T5244] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 238.578460][ T5244] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 238.588116][ T5244] hid-generic 0000:0000:0000.0024: hidraw1: HID v0.00 Device [syz0] on syz1 [ 238.679081][ T35] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 238.697567][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.709432][ T35] usb 5-1: Product: syz [ 238.712639][ T35] usb 5-1: Manufacturer: syz [ 238.714261][ T35] usb 5-1: SerialNumber: syz [ 238.721193][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 238.723339][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 238.726861][ T35] usb 5-1: config 0 descriptor?? [ 238.737886][ T25] usb 7-1: USB disconnect, device number 21 [ 238.862189][ T9184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.220401][ T5239] usb 5-1: USB disconnect, device number 19 [ 239.229008][ T65] Bluetooth: hci4: hardware error 0x20 [ 239.994142][ T6620] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 239.997243][ T6620] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 240.011037][ T6620] hid-generic 0000:0000:0000.0025: hidraw1: HID v0.00 Device [syz0] on syz1 [ 240.199804][ T39] audit: type=1800 audit(1719952741.337:102): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1370" name="file0" dev="sda1" ino=1980 res=0 errno=0 [ 240.313642][ T9224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.789642][ T5239] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 241.004085][ T5239] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 241.007838][ T5239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.020540][ T5239] usb 6-1: Product: syz [ 241.024027][ T5239] usb 6-1: Manufacturer: syz [ 241.026074][ T5239] usb 6-1: SerialNumber: syz [ 241.041851][ T5239] usb 6-1: config 0 descriptor?? [ 241.289970][ T35] usb 6-1: USB disconnect, device number 11 [ 241.299669][ T65] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 241.909241][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 241.917982][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 241.923878][ T35] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz0] on syz1 [ 242.539685][ T25] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 242.721344][ T25] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 242.728281][ T25] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.735247][ T25] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.749598][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.752898][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.778471][ T25] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 242.871536][ T9180] udevd[9180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.919230][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.994801][ T5239] usb 7-1: USB disconnect, device number 22 [ 243.662043][ T9268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1389'. [ 243.805275][ T9274] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 243.819615][ T9274] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1390'. [ 244.329643][ T5261] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 244.564371][ T5261] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 244.603241][ T5261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.613509][ T5261] usb 6-1: Product: syz [ 244.644947][ T5261] usb 6-1: Manufacturer: syz [ 244.653244][ T5261] usb 6-1: SerialNumber: syz [ 244.661035][ T5261] usb 6-1: config 0 descriptor?? [ 244.850156][ T5244] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 244.897744][ T5261] usb 6-1: USB disconnect, device number 12 [ 245.049854][ T5244] usb 5-1: Using ep0 maxpacket: 16 [ 245.138676][ T5244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.170142][ T5244] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.179594][ T5244] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.189591][ T5244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.194908][ T5244] usb 5-1: config 0 descriptor?? [ 245.439279][ T5244] usbhid 5-1:0.0: can't add hid device: -71 [ 245.440752][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.441471][ T5244] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 245.489776][ T5244] usb 5-1: USB disconnect, device number 20 [ 246.224671][ T9298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1398'. [ 246.939626][ T5261] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 247.139658][ T5261] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 247.173075][ T5261] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.198039][ T5261] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.211152][ T5261] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.220733][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.275466][ T5261] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 247.353639][ T9180] udevd[9180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.443253][ T6620] usb 5-1: USB disconnect, device number 21 [ 249.269603][ T55] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 249.430372][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.457630][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 249.480282][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.483967][ T55] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.507213][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.510787][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.527966][ T55] usb 6-1: config 0 descriptor?? [ 249.736048][ T55] usbhid 6-1:0.0: can't add hid device: -71 [ 249.738135][ T55] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 249.819920][ T55] usb 6-1: USB disconnect, device number 13 [ 250.151665][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.910274][ T9340] netlink: 'syz.1.1411': attribute type 11 has an invalid length. [ 250.913217][ T9340] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1411'. [ 251.527580][ T9344] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1413'. [ 252.133588][ T9351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.279665][ T5261] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 253.479688][ T5261] usb 6-1: Using ep0 maxpacket: 16 [ 253.504962][ T5261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.509895][ T5261] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.515433][ T5261] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.519439][ T5261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.539349][ T5261] usb 6-1: config 0 descriptor?? [ 253.756714][ T5261] usbhid 6-1:0.0: can't add hid device: -71 [ 253.762396][ T5261] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 253.774475][ T5261] usb 6-1: USB disconnect, device number 14 [ 254.682583][ T8209] syz_tun (unregistering): left promiscuous mode [ 255.108491][ T9382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.556705][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.878210][ T9388] netlink: 'syz.0.1426': attribute type 11 has an invalid length. [ 255.894230][ T9388] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1426'. [ 256.320841][ T5173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.325075][ T5173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.329285][ T5173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.338966][ T5173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.343287][ T5173] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.346797][ T5173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.071301][ T9411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.110751][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.115983][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.120224][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.124908][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.128396][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.132897][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.169661][ T5162] syz_tun (unregistering): left promiscuous mode [ 257.170240][ T6620] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 257.242490][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 257.379790][ T6620] usb 5-1: Using ep0 maxpacket: 16 [ 257.384066][ T6620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.387916][ T6620] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.404203][ T6620] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.408322][ T6620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.459985][ T6620] usb 5-1: config 0 descriptor?? [ 257.750704][ T6620] usbhid 5-1:0.0: can't add hid device: -71 [ 257.765871][ T6620] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.780115][ T6620] usb 5-1: USB disconnect, device number 22 [ 257.951061][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.954286][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.969831][ T9391] bridge_slave_0: entered allmulticast mode [ 257.990568][ T9391] bridge_slave_0: entered promiscuous mode [ 258.013508][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.019834][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.042708][ T9391] bridge_slave_1: entered allmulticast mode [ 258.062603][ T9391] bridge_slave_1: entered promiscuous mode [ 258.303541][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.381147][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.419776][ T5173] Bluetooth: hci1: command tx timeout [ 258.602921][ T9391] team0: Port device team_slave_0 added [ 258.619083][ T9391] team0: Port device team_slave_1 added [ 258.842131][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.849737][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.877222][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.900409][ T9412] chnl_net:caif_netlink_parms(): no params data found [ 258.969714][ T9430] netlink: 'syz.1.1434': attribute type 11 has an invalid length. [ 258.972469][ T9430] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1434'. [ 258.976110][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.978500][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.016096][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.203940][ T9391] hsr_slave_0: entered promiscuous mode [ 259.209017][ T9391] hsr_slave_1: entered promiscuous mode [ 259.212396][ T9391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.219815][ T5173] Bluetooth: hci2: command tx timeout [ 259.259699][ T9391] Cannot create hsr debugfs directory [ 259.510998][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.513527][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.530084][ T9412] bridge_slave_0: entered allmulticast mode [ 259.534993][ T9412] bridge_slave_0: entered promiscuous mode [ 259.570602][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.588590][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.619612][ T9412] bridge_slave_1: entered allmulticast mode [ 259.650532][ T9412] bridge_slave_1: entered promiscuous mode [ 259.802081][ T9412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.808373][ T9412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.819997][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.089970][ T9452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.092001][ T9412] team0: Port device team_slave_0 added [ 260.098228][ T9412] team0: Port device team_slave_1 added [ 260.377356][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.387486][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.419884][ T9412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.499648][ T5173] Bluetooth: hci1: command tx timeout [ 260.503757][ T9391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.540349][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.543521][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.582322][ T9412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.760851][ T9391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.844663][ T9456] input: syz0 as /devices/virtual/input/input17 [ 260.971927][ T9391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.018619][ T9412] hsr_slave_0: entered promiscuous mode [ 261.030724][ T9412] hsr_slave_1: entered promiscuous mode [ 261.034055][ T9412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.037446][ T9412] Cannot create hsr debugfs directory [ 261.071564][ T9391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.300288][ T65] Bluetooth: hci2: command tx timeout [ 261.595775][ T9391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.614922][ T9391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.761093][ T9412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.829774][ T9391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.835409][ T9391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.896138][ T9412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.007210][ T9412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.099838][ T9463] netlink: 'syz.1.1441': attribute type 11 has an invalid length. [ 262.139609][ T9463] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1441'. [ 262.173357][ T9412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.227585][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.258453][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.286371][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.289054][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.324467][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.327112][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.398442][ T9391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.416583][ T9391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.589759][ T65] Bluetooth: hci1: command tx timeout [ 262.621674][ T9412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.675568][ T9412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.701605][ T9412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.722273][ T9412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.018760][ T9412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.044955][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.095212][ T9412] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.126765][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.130345][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.180685][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.183383][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.263613][ T9391] veth0_vlan: entered promiscuous mode [ 263.288263][ T9391] veth1_vlan: entered promiscuous mode [ 263.379853][ T5171] Bluetooth: hci2: command 0x040f tx timeout [ 263.425353][ T9391] veth0_macvtap: entered promiscuous mode [ 263.434702][ T9391] veth1_macvtap: entered promiscuous mode [ 263.463488][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.470075][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.475128][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.478906][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.484156][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.488451][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.494063][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.498556][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.503925][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.514215][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.517787][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.540061][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.572132][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.612253][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.659700][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.689746][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.706875][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.724618][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.735426][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.759884][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.768565][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.778422][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.793289][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.803829][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.814879][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.823637][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.855509][ T9391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.860515][ T9391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.865115][ T9391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.872440][ T9391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.932768][ T9412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.063799][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.067332][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.201523][ T9412] veth0_vlan: entered promiscuous mode [ 264.231679][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.237916][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.240756][ T9412] veth1_vlan: entered promiscuous mode [ 264.413013][ T9412] veth0_macvtap: entered promiscuous mode [ 264.432071][ T9412] veth1_macvtap: entered promiscuous mode [ 264.488893][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.502474][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.506796][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.511947][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.516064][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.521104][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.525401][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.539681][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.544025][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.548584][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.560629][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.565220][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.589788][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.597193][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.611897][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.667218][ T5173] Bluetooth: hci1: command tx timeout [ 264.669295][ T9485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1422'. [ 264.754707][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.758950][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.872790][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.877354][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.899843][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.907085][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.919605][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.940041][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.944310][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.948797][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.969730][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.974039][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.977977][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.019612][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.031154][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.116243][ T9412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.131380][ T9412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.131597][ T9487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.135435][ T9412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.149711][ T9412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.469930][ T5173] Bluetooth: hci2: command 0x040f tx timeout [ 265.537709][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.576844][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.580425][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.614624][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.844018][ T9501] netlink: 'syz.2.1448': attribute type 11 has an invalid length. [ 265.847322][ T9501] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1448'. [ 266.409742][ T6620] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 266.594077][ T6620] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.597838][ T6620] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.601548][ T6620] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.609705][ T6620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.618154][ T6620] usb 7-1: invalid MIDI out EP 0 [ 266.665257][ T6620] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 266.772322][ T9508] udevd[9508]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.549929][ T5173] Bluetooth: hci2: command 0x040f tx timeout [ 267.965151][ T4659] usb 7-1: USB disconnect, device number 23 [ 269.103612][ T9527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1453'. [ 269.460069][ T9536] netlink: 'syz.2.1457': attribute type 11 has an invalid length. [ 269.463384][ T9536] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1457'. [ 269.632347][ T39] audit: type=1800 audit(1719952770.777:103): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1460" name="file0" dev="sda1" ino=1986 res=0 errno=0 [ 269.700212][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.871893][ T9546] input: syz0 as /devices/virtual/input/input18 [ 270.089945][ T57] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 270.363129][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.367942][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.380314][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 270.409766][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.419763][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.623982][ T57] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 270.695930][ T9508] udevd[9508]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.723575][ T57] usb 7-1: USB disconnect, device number 24 [ 270.860566][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.669926][ T9561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1465'. [ 273.012173][ T39] audit: type=1800 audit(1719952774.127:104): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1469" name="file0" dev="sda1" ino=1986 res=0 errno=0 [ 273.243142][ T9576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.869876][ T57] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 274.111763][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.115667][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.119087][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 274.139615][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.142871][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.188037][ T9588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1474'. [ 274.245769][ T57] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 274.310415][ T9508] udevd[9508]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.362417][ T5240] usb 5-1: USB disconnect, device number 23 [ 274.643057][ T5173] Bluetooth: hci1: hardware error 0x20 [ 276.030060][ T65] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.034255][ T65] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.037665][ T65] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.041225][ T65] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.044613][ T65] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.047218][ T65] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.204015][ T9617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1483'. [ 276.479581][ T57] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 276.580878][ T9613] chnl_net:caif_netlink_parms(): no params data found [ 276.662112][ T5173] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 276.667734][ T5173] Bluetooth: hci1: hardware error 0x20 [ 276.674041][ T57] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.689142][ T57] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 276.692909][ T57] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 276.699328][ T57] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.706274][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.777946][ T57] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 276.816490][ T9508] udevd[9508]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.934846][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.939882][ T4659] usb 6-1: USB disconnect, device number 15 [ 276.946602][ T9613] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.973970][ T9613] bridge_slave_0: entered allmulticast mode [ 276.984528][ T9635] input: syz0 as /devices/virtual/input/input19 [ 276.995365][ T9613] bridge_slave_0: entered promiscuous mode [ 277.015426][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.027170][ T9613] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.037034][ T9613] bridge_slave_1: entered allmulticast mode [ 277.045389][ T9613] bridge_slave_1: entered promiscuous mode [ 277.186935][ T9613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.197010][ T9613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.312789][ T9613] team0: Port device team_slave_0 added [ 277.323407][ T9613] team0: Port device team_slave_1 added [ 277.505640][ T9638] syz_tun: entered promiscuous mode [ 277.520332][ T9638] batadv_slave_0: entered promiscuous mode [ 277.523245][ T9638] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 277.525896][ T9638] Cannot create hsr debugfs directory [ 277.622008][ T9642] netlink: 'syz.2.1488': attribute type 11 has an invalid length. [ 277.626993][ T9642] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1488'. [ 277.638837][ T9613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.663981][ T9613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.672863][ T9613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.700787][ T9613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.720970][ T9613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.730641][ T9613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.865642][ T9613] hsr_slave_0: entered promiscuous mode [ 277.878981][ T9613] hsr_slave_1: entered promiscuous mode [ 277.908992][ T9613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.912065][ T9613] Cannot create hsr debugfs directory [ 278.109871][ T5171] Bluetooth: hci5: command tx timeout [ 278.366977][ T9658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1493'. [ 278.577972][ T9613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.739816][ T5173] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 279.041705][ T9613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.233275][ T9613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.420826][ T9613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.758752][ T9613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.800560][ T9613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.805443][ T9613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.821340][ T9613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.179999][ T5173] Bluetooth: hci5: command 0x041b tx timeout [ 280.207630][ T9675] netlink: 'syz.1.1496': attribute type 11 has an invalid length. [ 280.279660][ T9675] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1496'. [ 280.413174][ T9613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.458316][ T9613] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.577011][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.579694][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.590779][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.593306][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.634473][ T9613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.639717][ T9613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.929606][ T30] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 281.007077][ T9613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.123632][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.127393][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.139602][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.142691][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.180980][ T9681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.188406][ T9613] veth0_vlan: entered promiscuous mode [ 281.251902][ T9613] veth1_vlan: entered promiscuous mode [ 281.367599][ T9613] veth0_macvtap: entered promiscuous mode [ 281.393246][ T9613] veth1_macvtap: entered promiscuous mode [ 281.473920][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.497269][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.502221][ T30] usb 6-1: USB disconnect, device number 16 [ 281.509602][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.515175][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.521120][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.524641][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.528107][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.540036][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.544445][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.555141][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.559459][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.569589][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.573940][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.587870][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.592706][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.597596][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.636116][ T9613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.670557][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.681823][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.687181][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.693546][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.698435][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.709798][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.714074][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.719975][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.729816][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.734271][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.739356][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.744143][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.760706][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.773076][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.783055][ T9613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.789899][ T9613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.801125][ T9613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.834332][ T9613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.838349][ T9613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.849662][ T9613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.852687][ T9613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.053174][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.056193][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.117820][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.121769][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.124168][ T9693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1501'. [ 282.269625][ T65] Bluetooth: hci5: command 0x041b tx timeout [ 282.581325][ T57] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 282.583629][ T57] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 282.594168][ T57] hid-generic 0000:0000:0000.0027: hidraw1: HID v0.00 Device [syz0] on syz1 [ 282.653283][ T9700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.100813][ T9713] netlink: 'syz.2.1505': attribute type 11 has an invalid length. [ 283.145410][ T9713] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1505'. [ 283.747477][ T9728] input: syz0 as /devices/virtual/input/input20 [ 284.010654][ T39] audit: type=1800 audit(1719952785.157:105): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1510" name="file0" dev="sda1" ino=1997 res=0 errno=0 [ 284.340932][ T5173] Bluetooth: hci5: command 0x041b tx timeout [ 284.647015][ T10] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 284.667501][ T10] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 284.672329][ T10] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz0] on syz1 [ 284.719828][ T30] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 284.903983][ T30] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.908596][ T30] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 284.911524][ T9742] syz_tun: entered promiscuous mode [ 284.925710][ T30] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.929435][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.940402][ T9742] batadv_slave_0: entered promiscuous mode [ 284.976077][ T9742] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 284.979149][ T9742] Cannot create hsr debugfs directory [ 284.980874][ T9737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.079027][ T9742] netlink: 'syz.0.1514': attribute type 11 has an invalid length. [ 285.089631][ T9742] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1514'. [ 285.308713][ T815] usb 7-1: USB disconnect, device number 25 [ 285.580547][ T9752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.429642][ T65] Bluetooth: hci5: command 0x041b tx timeout [ 286.550474][ T39] audit: type=1800 audit(1719952787.697:106): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1519" name="file0" dev="sda1" ino=1998 res=0 errno=0 [ 287.472736][ T30] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 287.477992][ T9780] input: syz0 as /devices/virtual/input/input21 [ 287.489628][ T30] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 287.506841][ T30] hid-generic 0000:0000:0000.0029: hidraw1: HID v0.00 Device [syz0] on syz1 [ 287.838112][ T9784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.387207][ T65] Bluetooth: hci5: hardware error 0x20 [ 288.389837][ T30] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 288.571062][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.584002][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 288.637572][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.649741][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.681833][ T9789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.933557][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.013705][ T1417] usb 5-1: USB disconnect, device number 24 [ 290.004524][ T39] audit: type=1800 audit(1719952791.117:107): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1530" name="file0" dev="sda1" ino=1992 res=0 errno=0 [ 290.419797][ T65] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 291.541495][ T5244] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 291.555860][ T5244] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 291.579861][ T5244] hid-generic 0000:0000:0000.002A: hidraw1: HID v0.00 Device [syz0] on syz1 [ 291.842948][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.909121][ T39] audit: type=1326 audit(1719952793.047:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.2.1536" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73eb579 code=0x0 [ 292.095558][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.983255][ T5244] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.139770][ T5244] usb 5-1: device descriptor read/64, error -71 [ 293.489762][ T5244] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 293.641360][ T5244] usb 5-1: device descriptor read/64, error -71 [ 293.759952][ T5244] usb usb5-port1: attempt power cycle [ 294.169661][ T5244] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 294.212227][ T5244] usb 5-1: device descriptor read/8, error -71 [ 294.500134][ T5244] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 294.542682][ T5244] usb 5-1: device descriptor read/8, error -71 [ 294.672847][ T1417] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 294.676150][ T1417] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 294.690109][ T5244] usb usb5-port1: unable to enumerate USB device [ 294.702164][ T1417] hid-generic 0000:0000:0000.002B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 295.500282][ T9866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.939016][ T9870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.797277][ T9876] netlink: 'syz.1.1550': attribute type 11 has an invalid length. [ 296.827840][ T9876] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1550'. [ 297.552328][ T8] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 297.555333][ T8] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 297.619182][ T8] hid-generic 0000:0000:0000.002C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 297.879611][ T1417] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 298.039673][ T1417] usb 5-1: device descriptor read/64, error -71 [ 298.304817][ T9902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.319930][ T1417] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 298.480067][ T1417] usb 5-1: device descriptor read/64, error -71 [ 298.621039][ T1417] usb usb5-port1: attempt power cycle [ 298.985206][ T9909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.059851][ T1417] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 299.090473][ T1417] usb 5-1: device descriptor read/8, error -71 [ 299.369654][ T1417] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 299.410799][ T1417] usb 5-1: device descriptor read/8, error -71 [ 299.549090][ T1417] usb usb5-port1: unable to enumerate USB device [ 300.372670][ T9922] netlink: 'syz.1.1562': attribute type 11 has an invalid length. [ 300.399599][ T9922] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1562'. [ 301.029183][ T5261] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 301.032431][ T5261] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 301.047475][ T5261] hid-generic 0000:0000:0000.002D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 301.815702][ T9940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.960895][ T9941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.889923][ T5244] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 303.057810][ T9954] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1573'. [ 303.079342][ T5244] usb 6-1: device descriptor read/64, error -71 [ 303.089911][ T5173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.095791][ T5173] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.100316][ T5173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.105174][ T5173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.108084][ T5173] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.111204][ T5173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.369767][ T5244] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 303.380680][ T1417] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 303.410330][ T1417] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 303.420243][ T1417] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 303.550029][ T5244] usb 6-1: device descriptor read/64, error -71 [ 303.567210][ T9391] syz_tun (unregistering): left promiscuous mode [ 303.680218][ T5244] usb usb6-port1: attempt power cycle [ 304.082131][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 304.139639][ T5244] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 304.181157][ T5244] usb 6-1: device descriptor read/8, error -71 [ 304.449649][ T5244] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 304.519998][ T5244] usb 6-1: device descriptor read/8, error -71 [ 304.574110][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.577294][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.592494][ T9956] bridge_slave_0: entered allmulticast mode [ 304.596903][ T9956] bridge_slave_0: entered promiscuous mode [ 304.612970][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.638639][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.639964][ T5244] usb usb6-port1: unable to enumerate USB device [ 304.649730][ T9956] bridge_slave_1: entered allmulticast mode [ 304.652680][ T9956] bridge_slave_1: entered promiscuous mode [ 304.849156][ T39] audit: type=1800 audit(1719952805.987:109): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1580" name="file0" dev="sda1" ino=1996 res=0 errno=0 [ 304.857891][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.879307][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.082243][ T9956] team0: Port device team_slave_0 added [ 305.088805][ T9956] team0: Port device team_slave_1 added [ 305.219722][ T65] Bluetooth: hci2: command tx timeout [ 305.367981][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.371297][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.399573][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.405972][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.406219][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.408875][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.429611][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.667233][ T9956] hsr_slave_0: entered promiscuous mode [ 305.695902][ T9956] hsr_slave_1: entered promiscuous mode [ 305.699453][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.712007][ T9956] Cannot create hsr debugfs directory [ 305.999474][ T9986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.122438][ T9956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.265448][ T9956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.454917][ T9993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1584'. [ 306.592123][ T9956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.754820][ T9956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.060118][ T9999] input: syz0 as /devices/virtual/input/input22 [ 307.095670][ T9956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.120842][T10000] kcapi: manufacturer command 0 unknown. [ 307.168874][ T9956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.299749][ T5173] Bluetooth: hci2: command tx timeout [ 307.331504][ T9956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.337134][ T9956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.463444][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.513661][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.534299][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.537100][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.541172][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.543694][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.100345][T10011] netlink: 'syz.1.1588': attribute type 11 has an invalid length. [ 308.129583][T10011] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1588'. [ 308.411412][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.617391][ T9956] veth0_vlan: entered promiscuous mode [ 308.639376][ T9956] veth1_vlan: entered promiscuous mode [ 308.706221][ T9956] veth0_macvtap: entered promiscuous mode [ 308.734660][ T9956] veth1_macvtap: entered promiscuous mode [ 308.782557][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.798236][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.809879][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.814191][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.818310][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.830128][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.834648][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.839052][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.889671][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.894382][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.898829][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.904460][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.908884][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.919715][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.924161][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.928857][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.949644][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.954333][ T39] audit: type=1800 audit(1719952810.097:110): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1589" name="file0" dev="sda1" ino=1996 res=0 errno=0 [ 308.989641][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.001970][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.023135][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.027854][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.045803][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.050546][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.054833][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.059412][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.096680][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.101986][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.106296][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.119757][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.124153][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.137932][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.143078][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.147681][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.168467][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.173422][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.177763][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.188878][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.210208][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.217638][ T9956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.229853][ T9956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.233963][ T9956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.237855][ T9956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.380723][ T5173] Bluetooth: hci2: command 0x040f tx timeout [ 309.404876][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.408361][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.542497][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.545899][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.672262][T10023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.469688][ T65] Bluetooth: hci2: command 0x040f tx timeout [ 311.512662][T10034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.370472][ T39] audit: type=1800 audit(1719952813.517:111): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1598" name="file0" dev="sda1" ino=2002 res=0 errno=0 [ 312.402084][T10041] syz_tun: entered promiscuous mode [ 312.410247][T10041] batadv_slave_0: entered promiscuous mode [ 312.500634][T10041] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 312.503282][T10041] Cannot create hsr debugfs directory [ 312.572290][T10049] netlink: 'syz.3.1596': attribute type 11 has an invalid length. [ 312.590837][T10049] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1596'. [ 312.721699][ T5173] Bluetooth: hci2: hardware error 0x20 [ 313.101143][ T4659] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 313.104031][ T4659] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 313.160035][ T4659] hid-generic 0000:0000:0000.002F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 313.310013][ T35] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 313.512507][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 313.523386][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.527329][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.549693][ T35] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.559668][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.570271][ T35] usb 5-1: config 0 descriptor?? [ 313.805842][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 313.807916][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.810841][T10067] input: syz0 as /devices/virtual/input/input23 [ 313.821408][ T35] usb 5-1: USB disconnect, device number 33 [ 313.959854][T10067] kcapi: manufacturer command 0 unknown. [ 314.699639][ T6620] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 314.883869][ T6620] usb 5-1: device descriptor read/64, error -71 [ 314.910402][ T5173] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 314.913100][ T5173] Bluetooth: hci2: hardware error 0x20 [ 315.189725][ T6620] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 315.349645][ T6620] usb 5-1: device descriptor read/64, error -71 [ 315.469890][ T6620] usb usb5-port1: attempt power cycle [ 315.749733][T10077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.920043][ T6620] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 315.952135][ T6620] usb 5-1: device descriptor read/8, error -71 [ 316.154611][ T39] audit: type=1800 audit(1719952817.297:112): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1608" name="file0" dev="sda1" ino=2001 res=0 errno=0 [ 316.229788][ T6620] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 316.266323][ T6620] usb 5-1: device descriptor read/8, error -71 [ 316.397951][ T6620] usb usb5-port1: unable to enumerate USB device [ 316.991577][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.993331][ T5173] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 317.314786][ T5239] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 317.318115][ T5239] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 317.342215][ T5239] hid-generic 0000:0000:0000.0030: hidraw1: HID v0.00 Device [syz0] on syz1 [ 318.149647][ T5239] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 318.339673][ T5239] usb 6-1: Using ep0 maxpacket: 16 [ 318.349789][ T5239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.364945][ T5239] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.379657][ T5239] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.387180][ T5239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.406772][ T5239] usb 6-1: config 0 descriptor?? [ 318.647891][ T5239] usbhid 6-1:0.0: can't add hid device: -71 [ 318.650322][ T5239] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 318.666823][ T5239] usb 6-1: USB disconnect, device number 21 [ 319.363589][ T39] audit: type=1800 audit(1719952820.507:113): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1617" name="file0" dev="sda1" ino=1993 res=0 errno=0 [ 319.639751][T10113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.514118][ T5239] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 320.517415][ T5239] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 320.566093][ T5239] hid-generic 0000:0000:0000.0031: hidraw1: HID v0.00 Device [syz0] on syz1 [ 321.469714][ T39] audit: type=1800 audit(1719952822.587:114): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1626" name="file0" dev="sda1" ino=1994 res=0 errno=0 [ 321.549685][ T55] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 321.669989][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.809673][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 321.851443][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.857278][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 321.879858][ T55] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.883390][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.910761][ T55] usb 7-1: config 0 descriptor?? [ 322.162580][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 322.164885][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 322.223235][ T55] usb 7-1: USB disconnect, device number 26 [ 322.712286][T10156] input: syz0 as /devices/virtual/input/input24 [ 322.981324][T10156] kcapi: manufacturer command 0 unknown. [ 323.523041][ T5261] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 323.525692][ T5261] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 323.530565][ T5261] hid-generic 0000:0000:0000.0032: hidraw1: HID v0.00 Device [syz0] on syz1 [ 324.744135][ T39] audit: type=1800 audit(1719952825.887:115): pid=10176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1637" name="file0" dev="sda1" ino=2001 res=0 errno=0 [ 325.844135][T10185] syz_tun: entered promiscuous mode [ 325.862046][T10185] batadv_slave_0: entered promiscuous mode [ 325.953573][T10185] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 325.957087][T10185] Cannot create hsr debugfs directory [ 325.974529][T10190] netlink: 'syz.2.1641': attribute type 11 has an invalid length. [ 325.980154][T10190] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1641'. [ 326.201055][T10193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.497560][ T39] audit: type=1800 audit(1719952828.637:116): pid=10207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1646" name="file0" dev="sda1" ino=1995 res=0 errno=0 [ 329.034499][T10221] netlink: 'syz.2.1650': attribute type 11 has an invalid length. [ 329.037561][T10221] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1650'. [ 329.689806][ T5261] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 329.809919][T10231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.929724][ T5261] usb 6-1: Using ep0 maxpacket: 16 [ 329.990343][ T5261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.995689][ T5261] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.010561][ T5261] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 330.014948][ T5261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.043003][ T5261] usb 6-1: config 0 descriptor?? [ 330.292508][ T5261] usbhid 6-1:0.0: can't add hid device: -71 [ 330.296090][ T5261] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 330.332849][ T5261] usb 6-1: USB disconnect, device number 22 [ 330.906858][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 330.910140][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 330.920812][ T35] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz0] on syz1 [ 331.056781][ T39] audit: type=1800 audit(1719952832.197:117): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1656" name="file0" dev="sda1" ino=2002 res=0 errno=0 [ 332.474799][T10264] input: syz0 as /devices/virtual/input/input25 [ 332.509804][ T35] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 332.549944][T10264] kcapi: manufacturer command 0 unknown. [ 332.699750][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 332.707484][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.739670][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.759700][ T35] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.783448][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.808347][ T35] usb 5-1: config 0 descriptor?? [ 333.135242][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 333.138312][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 333.169999][ T35] usb 5-1: USB disconnect, device number 38 [ 334.335285][T10270] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1664'. [ 335.472987][ T35] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 335.478158][ T35] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 335.501692][ T35] hid-generic 0000:0000:0000.0034: hidraw1: HID v0.00 Device [syz0] on syz1 [ 336.359834][ T39] audit: type=1800 audit(1719952837.497:118): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1667" name="file0" dev="sda1" ino=2001 res=0 errno=0 [ 337.124780][T10279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1668'. [ 339.007001][ T35] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 339.243261][ T35] usb 5-1: no configurations [ 339.259700][ T35] usb 5-1: can't read configurations, error -22 [ 339.495178][ T35] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 339.721855][ T35] usb 5-1: no configurations [ 339.724027][ T35] usb 5-1: can't read configurations, error -22 [ 339.729762][ T35] usb usb5-port1: attempt power cycle [ 340.179836][ T35] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 340.211124][ T35] usb 5-1: no configurations [ 340.213778][ T35] usb 5-1: can't read configurations, error -22 [ 340.430366][ T35] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 340.507870][ T35] usb 5-1: no configurations [ 340.535493][ T35] usb 5-1: can't read configurations, error -22 [ 340.540073][ T35] usb usb5-port1: unable to enumerate USB device [ 341.011119][T10294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1673'. [ 341.860373][T10303] netlink: 'syz.2.1675': attribute type 11 has an invalid length. [ 341.863961][T10303] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1675'. [ 342.300384][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 342.334864][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.343740][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.349102][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.355580][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.360251][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.365654][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.431138][T10315] ================================================================== [ 342.435494][T10315] BUG: KFENCE: invalid free in kfree_skbmem+0x10e/0x200 [ 342.435494][T10315] [ 342.441108][T10315] Invalid free of 0xffff88807ea1af00 (in kfence-#12): [ 342.443720][T10315] kfree_skbmem+0x10e/0x200 [ 342.449395][T10315] kfree_skb_reason+0x138/0x210 [ 342.452025][T10315] __hci_req_sync+0x61d/0x980 [ 342.454256][T10315] hci_req_sync+0x97/0xd0 [ 342.456172][T10315] hci_dev_cmd+0x634/0x960 [ 342.458370][T10315] hci_sock_ioctl+0x4f3/0x880 [ 342.460754][T10315] hci_sock_compat_ioctl+0x68/0x80 [ 342.467181][T10315] compat_sock_ioctl+0x181/0x7f0 [ 342.469215][T10315] __do_compat_sys_ioctl+0x2c3/0x330 [ 342.471586][T10315] __do_fast_syscall_32+0x73/0x120 [ 342.474042][T10315] do_fast_syscall_32+0x32/0x80 [ 342.476612][T10315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.482048][T10315] [ 342.483936][T10315] kfence-#12: 0xffff88807ea1af00-0xffff88807ea1afef, size=240, cache=skbuff_head_cache [ 342.483936][T10315] [ 342.490406][T10315] allocated by task 65 on cpu 3 at 342.430855s: [ 342.493661][T10315] skb_clone+0x190/0x3f0 [ 342.495997][T10315] hci_cmd_work+0x66a/0x710 [ 342.498410][T10315] process_one_work+0x958/0x1ad0 [ 342.500832][T10315] worker_thread+0x6c8/0xf30 [ 342.502939][T10315] kthread+0x2c1/0x3a0 [ 342.504871][T10315] ret_from_fork+0x45/0x80 [ 342.507256][T10315] ret_from_fork_asm+0x1a/0x30 [ 342.510532][T10315] [ 342.511773][T10315] freed by task 65 on cpu 3 at 342.431052s: [ 342.514383][T10315] kfree_skbmem+0x10e/0x200 [ 342.516243][T10315] kfree_skb_reason+0x138/0x210 [ 342.518112][T10315] hci_req_sync_complete+0x16c/0x270 [ 342.520351][T10315] hci_event_packet+0x963/0x1190 [ 342.522576][T10315] hci_rx_work+0x2c4/0x1610 [ 342.525108][T10315] process_one_work+0x958/0x1ad0 [ 342.527938][T10315] worker_thread+0x6c8/0xf30 [ 342.530506][T10315] kthread+0x2c1/0x3a0 [ 342.532812][T10315] ret_from_fork+0x45/0x80 [ 342.534856][T10315] ret_from_fork_asm+0x1a/0x30 [ 342.537150][T10315] [ 342.538351][T10315] CPU: 2 PID: 10315 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 342.543542][T10315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.549804][T10315] ================================================================== [ 342.554528][T10315] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 342.559641][T10315] CPU: 2 PID: 10315 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 342.565022][T10315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.570169][T10315] Call Trace: [ 342.571737][T10315] [ 342.573558][T10315] dump_stack_lvl+0x3d/0x1f0 [ 342.576311][T10315] panic+0x6f5/0x7a0 [ 342.578609][T10315] ? __pfx_panic+0x10/0x10 [ 342.580930][T10315] ? __pfx__printk+0x10/0x10 [ 342.583090][T10315] ? check_panic_on_warn+0x1f/0xb0 [ 342.585402][T10315] check_panic_on_warn+0xab/0xb0 [ 342.587707][T10315] kfence_report_error+0x60b/0xde0 [ 342.590893][T10315] ? _find_first_zero_bit+0x94/0xb0 [ 342.594070][T10315] ? __pfx_kfence_report_error+0x10/0x10 [ 342.596718][T10315] ? add_lock_to_list+0x17d/0x380 [ 342.599021][T10315] ? kfence_guarded_free+0x373/0x5d0 [ 342.601519][T10315] ? __kfence_free+0xb1/0x1a0 [ 342.603783][T10315] ? kmem_cache_free+0x384/0x3a0 [ 342.606566][T10315] ? kfree_skbmem+0x10e/0x200 [ 342.609365][T10315] ? kfree_skb_reason+0x138/0x210 [ 342.611970][T10315] ? __hci_req_sync+0x61d/0x980 [ 342.614164][T10315] ? hci_req_sync+0x97/0xd0 [ 342.616465][T10315] ? hci_dev_cmd+0x634/0x960 [ 342.618637][T10315] ? hci_sock_ioctl+0x4f3/0x880 [ 342.621058][T10315] ? hci_sock_compat_ioctl+0x68/0x80 [ 342.623478][T10315] ? compat_sock_ioctl+0x181/0x7f0 [ 342.625917][T10315] ? __do_compat_sys_ioctl+0x2c3/0x330 [ 342.628336][T10315] ? __do_fast_syscall_32+0x73/0x120 [ 342.630859][T10315] ? do_fast_syscall_32+0x32/0x80 [ 342.633254][T10315] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.636266][T10315] kfence_guarded_free+0x373/0x5d0 [ 342.638661][T10315] __kfence_free+0xb1/0x1a0 [ 342.640740][T10315] kmem_cache_free+0x384/0x3a0 [ 342.642873][T10315] ? skb_release_data+0x761/0x980 [ 342.645189][T10315] ? kfree_skbmem+0x10e/0x200 [ 342.647106][T10315] kfree_skbmem+0x10e/0x200 [ 342.649125][T10315] kfree_skb_reason+0x138/0x210 [ 342.651329][T10315] __hci_req_sync+0x61d/0x980 [ 342.653443][T10315] ? __pfx___hci_req_sync+0x10/0x10 [ 342.655775][T10315] ? lock_acquire+0x1b1/0x560 [ 342.657923][T10315] ? hci_req_sync+0x3f/0xd0 [ 342.659772][T10315] ? find_held_lock+0x2d/0x110 [ 342.662058][T10315] ? __pfx___might_resched+0x10/0x10 [ 342.664159][T10315] ? aa_get_newest_label+0x376/0x680 [ 342.666587][T10315] hci_req_sync+0x97/0xd0 [ 342.668545][T10315] ? __pfx_hci_scan_req+0x10/0x10 [ 342.670922][T10315] hci_dev_cmd+0x634/0x960 [ 342.672993][T10315] ? __pfx_hci_dev_cmd+0x10/0x10 [ 342.675216][T10315] ? bpf_lsm_capable+0x9/0x10 [ 342.677145][T10315] ? security_capable+0x98/0xd0 [ 342.679317][T10315] hci_sock_ioctl+0x4f3/0x880 [ 342.681366][T10315] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 342.683740][T10315] hci_sock_compat_ioctl+0x68/0x80 [ 342.686120][T10315] compat_sock_ioctl+0x181/0x7f0 [ 342.688177][T10315] ? __pfx_hci_sock_compat_ioctl+0x10/0x10 [ 342.690977][T10315] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 342.693471][T10315] ? __fget_files+0x256/0x400 [ 342.696027][T10315] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 342.698651][T10315] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 342.701314][T10315] __do_compat_sys_ioctl+0x2c3/0x330 [ 342.703915][T10315] __do_fast_syscall_32+0x73/0x120 [ 342.706215][T10315] do_fast_syscall_32+0x32/0x80 [ 342.708138][T10315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.711162][T10315] RIP: 0023:0xf7461579 [ 342.713025][T10315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.721714][T10315] RSP: 002b:00000000ffaed724 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 342.726091][T10315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400448dd [ 342.729895][T10315] RDX: 00000000ffaed774 RSI: 00000000f744dff4 RDI: 0000000000000001 [ 342.733385][T10315] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 342.737378][T10315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.741659][T10315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.745116][T10315] [ 342.747295][T10315] Kernel Offset: disabled [ 342.750130][T10315] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:40:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000454725 RBX=0000000000000000 RCX=ffffffff8adc1d09 RDX=0000000000000000 RSI=ffffffff8b2cb9e0 RDI=ffffffff8b8fb5a0 RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000001 R9 =ffffed1005806fdd R10=ffff88802c037eeb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe29e50 R15=0000000000000000 RIP=ffffffff8adc30ff RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe3faf5728 CR3=00000000542a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=0810442004420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3faf95e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c58cf8db75d79e5c 737325360416bc9a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 0000000000000040 0000000039336c6c 696b66722f346963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6a8bf0031 3433383835383333 0000000000000021 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6ff8ba806a4ed2f 00005645776bdaee 0000000000000071 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000050fb39 RBX=0000000000000001 RCX=ffffffff8adc1d09 RDX=0000000000000000 RSI=ffffffff8b2cb9e0 RDI=ffffffff8b8fb5a0 RBP=ffffed1002c63910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fdd R10=ffff88802c137eeb R11=0000000000000000 R12=0000000000000001 R13=ffff88801631c880 R14=ffffffff8fe29e50 R15=0000000000000000 RIP=ffffffff8adc30ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f6b5b8 CR3=0000000047f6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f94105 RDI=ffffffff94d5be00 RBP=ffffffff94d5bdc0 RSP=ffffc9000ca97200 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=303878302f383678 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84f940a0 R15=0000000000000000 RIP=ffffffff84f9412f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fba434 CR3=00000000510f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001d3bdd RBX=0000000000000003 RCX=ffffffff8adc1d09 RDX=0000000000000000 RSI=ffffffff8b2cb9e0 RDI=ffffffff8b8fb5a0 RBP=ffffed1002c6d488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed1005866fdd R10=ffff88802c337eeb R11=0000000000000000 R12=0000000000000003 R13=ffff88801636a440 R14=ffffffff8fe29e50 R15=0000000000000000 RIP=ffffffff8adc30ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73251e0 CR3=00000000722e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000