last executing test programs: 9.834822172s ago: executing program 2 (id=2928): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x537d) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x3, 0x8) sync() r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffe9f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.863635287s ago: executing program 2 (id=2937): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) socket(0x22, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) userfaultfd(0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x5, 0x100000, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.72344086s ago: executing program 2 (id=2938): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001340)="db", 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x578) 4.531428385s ago: executing program 3 (id=2971): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) fsmount(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r5}, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @none, 0x3}}}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x264e33, 0x0) r7 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x43, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 4.091914098s ago: executing program 3 (id=2975): syz_emit_vhci(&(0x7f0000000dc0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x6f3}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x9, "a894fd", 0x401, 0x9, "351c8ccdcaa0ab383596be5d8f0f6390cb53c1ee985bc29c64c3e71d8f5e97103986ce3ee49c5cf04e8d51b43a456fe1957750bf4993b76378dc234da6debdf959e2e412b02e7d2d573aeb67f5e98581815a16ee4bc387c9eab9af14a7194e079e52aded7fd78777056f029f8bc624d0eefee396da5f4d685bbb6bc6a71ea320836586c8e6698b69e9c79c966f9ea23c56b808b500cb6215e99b056ba3becd8b3e1a063b9aca42f92b0c80606e0a53a2dec5c813275e42dec9cd8a14b19e09e75254a4c68e24bcba06960ba3404556fc0b2006ed98815f797404f4d5188bfe8a664d93d2b443721735b4bb471057b1c3"}, {@any, 0x7f, 0x3f, '.\x00@', 0xfff, 0xc0, "5aa3bef492ba58097f760d545c5dc630343b9f5f2ef8ccdfac6be09bbe23b7c1c038033eecb367512189b6a01aac251e89a78f69b6477d01b744ce335e25dc283b52d2b4d5a21af1e8ea30ba32b5b462a903e144985c10dedc0a3d2b920a7557c6a8a3db188affe240e88e6d28f4d862c0049b23f2caeebe44d24a11dc42e0c2144302b37fa58ac9f28ff7a7c13a99e6ed89b338382501289c30520a030e99a9fa993b18ce2d8a867b689b370fdf05cbd14faaacb9a463813c2c82b5167cf9841e9b582c7cdd9f6e5378ff9747ed163d55d261e2943cf987c2807055eeb8b8ede506a3fc75e2d481e8f3a71fe060c6ec"}, {@any, 0x5, 0x5, '\bv3', 0x4, 0x40, "d1f98d0feb496d3cccece25c46801a471f3caad3a3e5118d8b95e281e19182f2a2e9a8c6487565a397d615d424370348aeaa675600b116e9c245c38baf414b697bb1aaf3dcfe0aea6b617781f84ec0868677a3fb04c67da85b432d6d3ba24d6418d8b43b6304932aa6dbb31d855770039f4597ac54bcff9bcfed3b65238f436bbf27f27343c02f0ab990f2bfdc1479291c518832b1107c22f2d415cfb67e59a856bc8629d221b21e3e302a11418d6c260dc39ca6319c1208750f29285bcfa2387b02c26b8726c216447936def21b3cedfff6cc3e213576cc2f41652a814dfc9308bef487b0489d27816234f0f24649fe"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe0, 0x7, 'BpD', 0x4, 0x9, "914bc2e240c1c1fae7450a8095b20e5e1716fd474147ddf2d89355c91846c39af3d074532290491325df3322929c58a5ee112b96b0156845d36040d169b90b4eb1d090c54275e1ee8e4caa1e4cb6acde9a64f576753bf0984dd661711bd999ec3ea2f14791f7fd3dd426711c28becf3e3cbe734619d0a5803356ee6847e7624445f795d224ab79ddef96472edd7ffa8b14f5a9d832d0b1200de110641ead832fcdae393d1d207012a0afb560fe7083a041548fddf63453fb726cace5183e17056d3aa667a10e6cc5d59adc7687e5e355f1596d9cce57de957c8b510a2db2b88dc3c916cbb108dd9c8c2a55280371fa29"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0x3, "b30e41", 0xffff, 0x4, "c783426a3c33c23882981402138bdf1bc32fd09af773b59005b20a8e9e0f80b61e298c00e91a3b99c5d6842e57bfdabcb90f078b049311cbf7c8f7971e0c5db224d1286ea894ca5af68a4fc4acf1800b57bcd22ad0c8035ac49fe162a345891ea7cc2275d76e20c69014d0f052a7358cdc5b55c17fbf691af1da3e4350e201339b2c712bb01ccea5817aff52919e051c603eecc25a46283dd2e9e63361d8e019d13ef66910b355a6961cd85d41f05ecb3299778bb6d76b0c0ab15ac59c4460f893cd48da4fc3f9c80f1895666e7c6070e3279513d634a7c7b3dc8bae76e754fbdb1a1f29f85062eb9f172cc6d07fb885"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0xff, "251ecf", 0x2, 0x5, "d03c802c0a485d9f3b0d4250b42216e3f619de6a197d945f121b172ecd61d8d300aae8d587346d71c8039584024efccd40e6e9b21e5a425a014d1f741eb96d7828297d6955a266c2f333c8e84a95657f9ae1491e5f92b2d7f7671968baf201a8fa01bd1e3603e11be9584bf4222fb602502922253f8c0fd41525761589bbbdd5ce698451601563470814400df98cc223cb6202d6bf278825a86ad8160e131cdb2ddc1376d55997d088092e70b2cdcd791f1f536f4ff7515a6f690b7270bcdf227da178c29b2c8b0f46af3121043476233a52554ae2a939e8b304756ceebacedf594fd36f40588055ad76edd9fd289b20"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x5, "0974c0", 0x9, 0x0, "39b9ce11736bed151fec404c6c0cf98ad994d7f5d7d5eaa8ead2fe4e3a2310beb4ada2bfd291d8b6a3c64a2539fc9277166ca5ce215add14a3b689f5a03b61ac157e57b5f1a20ef6f7b9e48dd9342ae6fc28ed30c158ae8643f4badb1ce493c693a3645ba0f5a5115afbad3349131b21eb1cd7ab1c31c749483df76352a028600fa125c155c8146bfcdf235c8a272627a1b822cbceafc711a43883ea8bfbf46d2846c5ab3f0614e58ac6744c8de339102eae9247345ba30438e39b6dfbf02323f3c2edbe2914630f6f0dc78fbd4c77253e31160b12c9ccd5b36358cb823400e5f0489e9a70b378a8865088de738cc449"}]}}}, 0x6f6) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c80039225c5c8d7a1b49f33ba00156f88709fd432ee5d3b26cd610178d97c4ae4b36825b8ff45da04e8b345e7afa082c2dbb3d2605083b824e76c5"], 0x3d) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x8b) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x80001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x5, 0x3, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8, 0x9, 0x3cc}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x50323234}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001040000000000000700000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000001869000009000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32, @ANYBLOB="000000000b000000b703000000000000850000000c000000b7000000000000008500000070000000180000000100000000000000001000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socket(0x0, 0x3, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.023682079s ago: executing program 1 (id=2977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6100330080000000ffffffffffff0802110000005050505050500000000000000000000064000000000602020202020201"], 0x80}}, 0x0) 3.954710452s ago: executing program 1 (id=2978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x537d) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x3, 0x8) sync() r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffe9f) syz_io_uring_setup(0x3172, &(0x7f0000000240)={0x0, 0x4, 0x200, 0x3, 0x81}, &(0x7f00000001c0), &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.012683045s ago: executing program 1 (id=2982): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) fsmount(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r5}, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @none, 0x3}}}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x264e33, 0x0) socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 2.874832694s ago: executing program 0 (id=2985): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x578) 2.774257969s ago: executing program 0 (id=2986): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000d000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x115, 0x0, 0x0, {0x2}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x2, 0x1f, 0x4, 0x1}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2}, {0x4, 0x1}, {0x0, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35) r7 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002b40)='n', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f0000001b40)=""/4096, 0x1000) keyctl$read(0xb, r7, &(0x7f0000000180)=""/4096, 0x1000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r8, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2d, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x5, [{0x0, 0x1}, {0x4}, {0xb, 0x1}, {}, {}]}, @void}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000000), 0x9) 1.893704294s ago: executing program 1 (id=2987): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x28000801) socket(0x22, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x5, 0x100000, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) 1.893314254s ago: executing program 3 (id=2988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.791075363s ago: executing program 3 (id=2989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x537d) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x3, 0x8) sync() r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffe9f) syz_io_uring_setup(0x3172, &(0x7f0000000240)={0x0, 0x4, 0x200, 0x3, 0x81}, &(0x7f00000001c0), &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.564483332s ago: executing program 1 (id=2990): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x0, 0x9, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 1.497108525s ago: executing program 1 (id=2991): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="bb0ccf773b8addb37c519909337d58034b9a271ca1b09398ffaec9bab257008a0875ef8ff40881052693f1512a1b907598035f0d6e2a3a4c177e9146a046baeafe8ce83b997ec7e5635cf41873dc", 0x4e}], 0x1) 1.383518337s ago: executing program 0 (id=2992): r0 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0800, 0x20) statx(r0, &(0x7f0000000200)='./file0\x00', 0x4000, 0x20, &(0x7f0000000240)) lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0xe9, 0x2, 0xa9, "dfef45ac1c58b7d85006be9a76a9f123", "c344c858fdbb30fb5c0ad3d22aba71e641f58319998d80f0f0cbd52cc2adc71d944908e3ab519aa73f24a67315fef56665c4be797b3f248635446141a54f7e1f8390ccc31dabcd204df8cdd7a158a26eeb89555155dd233d52d247be6272f86cf51e6eb965662842abb8f8c6510b675e31d4e6e03e98e19c13b7274b65ed8055eb26b595209a30c7cc06648c235705b83f409c458f5974bfe26ee18c4f1bfc585ab38a6abd2f8742802fbae833aeeace6791b44e5a4c7311657ffa8f59baa8a55224eabd3a6e626a3ecd350f5ecfc7a60794d2ce"}, 0xe9, 0x1) r1 = openat$vsock(0xffffff9c, &(0x7f00000004c0), 0x40c000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r2, 0xfffff801, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, @ib={0x1b, 0xff53, 0x9, {"b455bd9c7e0043d448d36ab7b4d43eef"}, 0x4, 0x4, 0x6}}}, 0x118) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8114}, 0x20008800) getsockname$unix(r1, &(0x7f0000000840)=@abs, &(0x7f00000008c0)=0x6e) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb0, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8894}, 0x4008014) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x5}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x78}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000e40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e00)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000e80)={0x13, 0x10, 0xfa00, {&(0x7f0000000c00), r5}}, 0x18) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x1f, 0x11}}) r8 = socket$inet(0x2, 0x80000, 0x100) getsockname(r8, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000001100)=0x80) write$cgroup_int(r1, &(0x7f0000001140)=0x1, 0x12) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001180)={0x0, 0xf7, "e940c0a958dcf77782f24a157efb75e16a1e87810d3a5a10b79cad20c2d8cb24117d0a1143920cafb670ad19fa477e796782f370b548e13278f25d6be88aa5ccd968a429a2080b440cd0cdabc5f3d915ecb116ea2045d3ad9872a3a3d9a6bf702a77b7bf8b18a92ef298a95622956b705f65e220a83f2d82046b09de2b71c1bcfb85a2a57add796714589dc17df199fca641f93e20b4828193384840af0a813bad47718c48337342d0f14eb3f323eae9a4c6e090dd58e5d4d36cd1b3d1deb98fa887711c346cc7da13c0237eded916a477a55e4585aafa525e8da351715dedcd13baaaf8c9dc12514f92efac947e2a9adfd6f30e42899e"}, &(0x7f0000001280)=0xff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000012c0)={r10, @in6={{0xa, 0x4e22, 0x3, @remote, 0x7fffffff}}, 0xfffffff7, 0x8, 0x9, 0x1, 0x100}, &(0x7f0000001380)=0x98) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f00000013c0)={0x5ed4, "76b16df6f53ace46d574887958e5b59d0cca9aca0d8b71db677eeb1387e4e416", 0x1, 0x1}) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000001400)={0x1, 0x1, 0xc, 0x8, 0x80000001, 0x81}) userfaultfd(0x80001) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001480), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}}, 0x8044) 1.194581158s ago: executing program 0 (id=2993): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x578) 1.194131289s ago: executing program 0 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x537d) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x3, 0x8) sync() r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffe9f) syz_io_uring_setup(0x3172, &(0x7f0000000240)={0x0, 0x4, 0x200, 0x3, 0x81}, &(0x7f00000001c0), &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 998.888336ms ago: executing program 2 (id=2940): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x28000801) socket(0x22, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) userfaultfd(0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x5, 0x100000, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 894.700182ms ago: executing program 3 (id=2995): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="6781e949893c685d073d6089c0cfbaf22f5efff9ff8d2ca20b7864dec9e91d08182157ccf54548a2822fe869f08db377a64448d654a613a6b390e8c8232bdc1e381a3a355b729e3d0c75e4bdc060c09a1fb4d5d6330088eee6099243ac7219c6bc99ed46db75a73c74069679f9d8de0777cf4e488361f3195704ed5a79b50e436a3cfb728614258f0751adc93c41a3ec9cc21a0cabe8b622ed7cd947bcc795e8b423367aa8ab91f4810ac788a88759a6cd01d450faaeb30d0ba3f447e76746252348336bd6934399"}) r2 = creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000200), 0xa) setxattr$security_ima(&(0x7f0000000240)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500), &(0x7f0000000800)=ANY=[@ANYRESDEC=r2, @ANYRESOCT, @ANYRESOCT=r1, @ANYBLOB="46dee2a878ac1b3e4b5b2ff72fe5a906a232786b67c056984a2374a04a7b5c6d1a5927276238cfaf612622680400b15a2f3f8d4523e847b541b8e801b070ccaa2083795a9226c2d6907359a6d7a3d096f9a24829f9a6fa60721cd41cb95d060e6ce6ffff26b0c5cdc8db03c92f0c81f61022fd90e1e7283d189f453b4293980b0e2a9a63fdf2930d8c68c88a611acf4dfcb8cab26307d47be6b7c4a217566a4865afc3bb94020870b8929ea4bd8f5719b0698db422ecfb316d4c7bb3f65871ebad5a5bf859db1e9a12ebad456efad24ef6", @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRES64=r0], 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="04ff0a026bd09ec92fd99a184d"], 0xd) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x0, {0x2, 0x530f, 0x1, 0xfffffffa}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r4, 0x141601) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x180, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=0x100) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket$inet_udplite(0x2, 0x2, 0x88) 809.061797ms ago: executing program 2 (id=2996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6100330080000000ffffffffffff0802110000005050505050500000000000000000000064000000000602020202020201"], 0x80}}, 0x0) 714.731866ms ago: executing program 2 (id=2997): r0 = socket(0x23, 0x3, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) r3 = socket(0x1d, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4888}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x9) r4 = socket(0x18, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'syzkaller1\x00'}}, 0x1e) sendmmsg$unix(r4, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x11e) fcntl$lock(r0, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) creat(0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) shutdown(r1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x2060}], 0x1, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 297.743812ms ago: executing program 0 (id=2998): r0 = socket(0x23, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa03e, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) r3 = socket(0x1d, 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4888}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x9) r4 = socket(0x18, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'syzkaller1\x00'}}, 0x1e) sendmmsg$unix(r4, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], 0x11e) fcntl$lock(r0, 0x0, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) creat(0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) shutdown(r1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x2060}], 0x1, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3 (id=2999): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000d000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x115, 0x0, 0x0, {0x2}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x2, 0x1f, 0x4, 0x1}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2}, {0x4, 0x1}, {0x0, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void}, 0x35) r7 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002b40)='n', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f0000001b40)=""/4096, 0x1000) keyctl$read(0xb, r7, &(0x7f0000000180)=""/4096, 0x1000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r8, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2d, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x5, [{0x0, 0x1}, {0x4}, {0xb, 0x1}, {}, {}]}, @void}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000000), 0x9) kernel console output (not intermixed with test programs): caif_netlink_parms(): no params data found [ 314.760099][ T1091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.852058][ T1091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.885448][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.888767][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.892321][T10711] bridge_slave_0: entered allmulticast mode [ 314.895896][T10711] bridge_slave_0: entered promiscuous mode [ 314.900371][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.903959][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.908159][T10711] bridge_slave_1: entered allmulticast mode [ 314.912679][T10711] bridge_slave_1: entered promiscuous mode [ 315.020738][T10711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.028315][T10711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.102773][T10711] team0: Port device team_slave_0 added [ 315.110663][T10711] team0: Port device team_slave_1 added [ 315.171593][T10711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.174640][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.186533][T10711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.192318][T10711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.195262][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.208385][T10711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.287271][T10711] hsr_slave_0: entered promiscuous mode [ 315.288025][ T5263] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 315.297101][T10711] hsr_slave_1: entered promiscuous mode [ 315.300831][T10711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.303727][T10711] Cannot create hsr debugfs directory [ 315.320394][T10744] can: request_module (can-proto-0) failed. [ 315.333419][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 315.362976][ T1091] bridge_slave_1: left allmulticast mode [ 315.368833][ T1091] bridge_slave_1: left promiscuous mode [ 315.371139][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.378402][ T1091] bridge_slave_0: left allmulticast mode [ 315.381395][ T1091] bridge_slave_0: left promiscuous mode [ 315.383794][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.421491][T10752] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 315.477879][ T5263] usb 8-1: Using ep0 maxpacket: 32 [ 315.482972][ T5263] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 315.492828][ T5263] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 315.496819][ T5263] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 315.502366][ T5263] usb 8-1: Product: syz [ 315.504106][ T5263] usb 8-1: Manufacturer: syz [ 315.506067][ T5263] usb 8-1: SerialNumber: syz [ 315.510769][ T5263] usb 8-1: config 0 descriptor?? [ 315.514582][T10739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.797890][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.805297][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.812232][ T1091] bond0 (unregistering): Released all slaves [ 316.181435][ T1091] hsr_slave_0: left promiscuous mode [ 316.186407][ T1091] hsr_slave_1: left promiscuous mode [ 316.192399][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.195303][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.201555][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.205106][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.258100][ T1091] veth1_macvtap: left promiscuous mode [ 316.260605][ T1091] veth0_macvtap: left promiscuous mode [ 316.263256][ T1091] veth1_vlan: left promiscuous mode [ 316.265807][ T1091] veth0_vlan: left promiscuous mode [ 316.352109][T10764] netlink: 'syz.0.1836': attribute type 10 has an invalid length. [ 316.478386][ T5211] Bluetooth: hci2: command tx timeout [ 317.204934][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.207432][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.517778][ T5261] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 317.533135][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 317.641356][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 317.707566][ T5261] usb 5-1: Using ep0 maxpacket: 32 [ 317.711980][ T5261] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 317.729617][ T5261] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.733721][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.737641][ T5261] usb 5-1: Product: syz [ 317.739943][ T5261] usb 5-1: Manufacturer: syz [ 317.742103][ T5261] usb 5-1: SerialNumber: syz [ 317.749075][ T5261] usb 5-1: config 0 descriptor?? [ 317.753878][T10772] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 317.764252][ T5261] chaoskey 5-1:0.0: Unable to register with hwrng [ 318.031292][ T6851] usb 8-1: USB disconnect, device number 58 [ 318.071552][ T1262] usb 5-1: USB disconnect, device number 37 [ 318.557663][ T5211] Bluetooth: hci2: command tx timeout [ 318.601134][ T5211] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 318.697563][T10781] netlink: 'syz.1.1840': attribute type 21 has an invalid length. [ 318.711960][T10781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1840'. [ 319.099567][T10711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.139173][T10711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.146713][T10711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.156935][T10711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.195469][T10804] netlink: 'syz.1.1843': attribute type 10 has an invalid length. [ 319.395235][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.425150][T10711] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.443138][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.446510][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.450947][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.453389][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.669408][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.687924][ T55] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 319.726333][T10711] veth0_vlan: entered promiscuous mode [ 319.738493][T10711] veth1_vlan: entered promiscuous mode [ 319.773526][T10711] veth0_macvtap: entered promiscuous mode [ 319.781597][T10711] veth1_macvtap: entered promiscuous mode [ 319.802467][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.807353][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.814141][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.823714][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.829199][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.833869][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.840877][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.852883][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.858497][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.862819][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.867358][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.872150][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.876764][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.885668][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.889729][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 319.897451][ T55] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 319.901677][T10711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.906034][T10711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.911866][ T55] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 319.913720][T10711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.917685][ T55] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 319.920068][T10711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.923784][ T55] usb 5-1: Product: syz [ 319.939654][ T55] usb 5-1: Manufacturer: syz [ 319.941930][ T55] usb 5-1: SerialNumber: syz [ 319.949848][ T55] usb 5-1: config 0 descriptor?? [ 319.953073][T10816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 320.031081][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.034208][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.064009][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.066837][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.247708][ T5261] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 320.349554][ T5694] usb 5-1: USB disconnect, device number 38 [ 320.427646][ T5261] usb 6-1: Using ep0 maxpacket: 32 [ 320.432279][ T5261] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 320.451882][ T5261] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 320.455011][ T5261] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 320.458222][ T5261] usb 6-1: Product: syz [ 320.459723][ T5261] usb 6-1: Manufacturer: syz [ 320.461418][ T5261] usb 6-1: SerialNumber: syz [ 320.472489][ T5261] usb 6-1: config 0 descriptor?? [ 320.475990][T10839] netlink: 'syz.2.1851': attribute type 21 has an invalid length. [ 320.478515][T10828] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 320.487571][T10839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1851'. [ 320.615362][T10839] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.647865][ T5211] Bluetooth: hci2: command tx timeout [ 320.832738][ T1262] usb 6-1: USB disconnect, device number 47 [ 320.927584][ T57] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 321.117776][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 321.122517][ T57] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 321.129859][ T57] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.133918][ T57] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.137886][ T57] usb 8-1: Product: syz [ 321.139615][ T57] usb 8-1: Manufacturer: syz [ 321.141712][ T57] usb 8-1: SerialNumber: syz [ 321.163559][ T57] usb 8-1: config 0 descriptor?? [ 321.166281][T10842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.237774][T10858] netlink: 'syz.2.1856': attribute type 10 has an invalid length. [ 321.528442][ T6851] usb 8-1: USB disconnect, device number 59 [ 322.717663][ T5211] Bluetooth: hci2: command tx timeout [ 322.757651][ T1262] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 322.958208][ T1262] usb 8-1: Using ep0 maxpacket: 32 [ 322.969574][ T1262] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 322.981989][ T1262] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 322.996849][ T1262] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.017814][ T1262] usb 8-1: Product: syz [ 323.020392][ T1262] usb 8-1: Manufacturer: syz [ 323.022718][ T1262] usb 8-1: SerialNumber: syz [ 323.048960][ T1262] usb 8-1: config 0 descriptor?? [ 323.052329][T10887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.181823][T10908] netlink: 'syz.0.1870': attribute type 10 has an invalid length. [ 323.458136][ T1262] usb 8-1: USB disconnect, device number 60 [ 324.697725][ T5261] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 324.850077][T10954] can: request_module (can-proto-0) failed. [ 324.857365][ T5211] Bluetooth: hci3: unexpected event 0x07 length: 283 > 255 [ 324.887590][ T5261] usb 6-1: Using ep0 maxpacket: 32 [ 324.899808][ T5261] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 324.906563][ T5261] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 324.915285][ T5261] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 324.921058][ T5261] usb 6-1: Product: syz [ 324.922557][ T5261] usb 6-1: Manufacturer: syz [ 324.924280][ T5261] usb 6-1: SerialNumber: syz [ 324.933690][ T5261] usb 6-1: config 0 descriptor?? [ 324.941079][T10947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 325.310767][ T1262] usb 6-1: USB disconnect, device number 48 [ 325.518616][ T6851] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 325.697618][ T6851] usb 5-1: Using ep0 maxpacket: 32 [ 325.702295][ T6851] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 325.711192][ T6851] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 325.714703][ T6851] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 325.717310][ T6851] usb 5-1: Product: syz [ 325.720583][ T6851] usb 5-1: Manufacturer: syz [ 325.727539][ T6851] usb 5-1: SerialNumber: syz [ 325.738591][ T6851] usb 5-1: config 0 descriptor?? [ 325.745637][T10975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 325.831481][T10994] netlink: 'syz.2.1897': attribute type 21 has an invalid length. [ 325.835033][T10994] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1897'. [ 326.106096][ T56] usb 5-1: USB disconnect, device number 39 [ 326.684944][T11016] can: request_module (can-proto-0) failed. [ 326.692935][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 326.768185][ T55] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 326.950896][T11028] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 326.979296][ T55] usb 6-1: no configurations [ 326.981457][ T55] usb 6-1: can't read configurations, error -22 [ 327.137722][ T55] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 327.328927][ T55] usb 6-1: no configurations [ 327.331575][ T55] usb 6-1: can't read configurations, error -22 [ 327.335047][ T55] usb usb6-port1: attempt power cycle [ 327.399073][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 327.500005][T11034] netlink: 'syz.0.1908': attribute type 21 has an invalid length. [ 327.518501][T11034] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1908'. [ 327.777589][ T55] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 327.828831][ T55] usb 6-1: no configurations [ 327.830974][ T55] usb 6-1: can't read configurations, error -22 [ 327.987884][ T55] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 328.018687][ T55] usb 6-1: no configurations [ 328.020777][ T55] usb 6-1: can't read configurations, error -22 [ 328.023424][ T55] usb usb6-port1: unable to enumerate USB device [ 328.401966][T11061] can: request_module (can-proto-0) failed. [ 328.411730][ T5211] Bluetooth: hci3: unexpected event 0x07 length: 283 > 255 [ 328.845428][T11075] netlink: 'syz.0.1920': attribute type 10 has an invalid length. [ 329.607918][ T5211] Bluetooth: hci0: command tx timeout [ 329.694868][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 329.902753][ T5263] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 330.087583][ T5263] usb 6-1: Using ep0 maxpacket: 32 [ 330.095172][ T5263] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 330.106817][ T5263] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 330.115708][ T5263] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 330.125642][ T5263] usb 6-1: Product: syz [ 330.132642][ T5263] usb 6-1: Manufacturer: syz [ 330.139162][ T5263] usb 6-1: SerialNumber: syz [ 330.147432][ T5263] usb 6-1: config 0 descriptor?? [ 330.153498][T11090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.527635][ T5241] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 330.633880][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 330.728056][ T5241] usb 7-1: no configurations [ 330.732845][ T5241] usb 7-1: can't read configurations, error -22 [ 330.917722][ T5241] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 331.108483][ T5241] usb 7-1: no configurations [ 331.110438][ T5241] usb 7-1: can't read configurations, error -22 [ 331.113454][ T5241] usb usb7-port1: attempt power cycle [ 331.138751][T11137] netlink: 'syz.0.1940': attribute type 10 has an invalid length. [ 331.200145][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 331.527779][ T5241] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 331.573656][ T5241] usb 7-1: no configurations [ 331.575772][ T5241] usb 7-1: can't read configurations, error -22 [ 331.727679][ T5241] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 331.759838][ T5241] usb 7-1: no configurations [ 331.762047][ T5241] usb 7-1: can't read configurations, error -22 [ 331.766411][ T5241] usb usb7-port1: unable to enumerate USB device [ 331.847896][ T5211] Bluetooth: hci0: command tx timeout [ 332.029914][T11157] can: request_module (can-proto-0) failed. [ 332.038858][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 332.262522][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 332.481835][ T6851] usb 6-1: USB disconnect, device number 53 [ 332.623344][ T5211] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 332.818449][ T5211] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 332.923810][T11190] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 333.357595][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 333.377669][ T5263] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 333.557693][ T5263] usb 6-1: Using ep0 maxpacket: 32 [ 333.568785][ T5263] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.574321][ T5263] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.578015][ T5263] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 333.580987][ T5263] usb 6-1: Product: syz [ 333.582483][ T5263] usb 6-1: Manufacturer: syz [ 333.584270][ T5263] usb 6-1: SerialNumber: syz [ 333.588241][ T5263] usb 6-1: config 0 descriptor?? [ 333.591203][T11197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.735032][T11213] can: request_module (can-proto-0) failed. [ 333.741930][ T5211] Bluetooth: hci3: unexpected event 0x07 length: 283 > 255 [ 333.917642][ T5211] Bluetooth: hci0: command tx timeout [ 334.217640][ T5263] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 334.399002][ T5263] usb 5-1: no configurations [ 334.401045][ T5263] usb 5-1: can't read configurations, error -22 [ 334.558130][ T5263] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 334.739041][ T5263] usb 5-1: no configurations [ 334.741055][ T5263] usb 5-1: can't read configurations, error -22 [ 334.743983][ T5263] usb usb5-port1: attempt power cycle [ 335.147762][ T5263] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 335.152488][T11252] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 335.180202][ T5263] usb 5-1: no configurations [ 335.183452][ T5263] usb 5-1: can't read configurations, error -22 [ 335.337889][ T5263] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 335.371158][ T5263] usb 5-1: no configurations [ 335.373251][ T5263] usb 5-1: can't read configurations, error -22 [ 335.376986][ T5263] usb usb5-port1: unable to enumerate USB device [ 335.437763][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 335.990072][T11264] can: request_module (can-proto-0) failed. [ 336.005264][ T5211] Bluetooth: hci3: unexpected event 0x07 length: 283 > 255 [ 336.143893][ T6851] usb 6-1: USB disconnect, device number 54 [ 336.340740][T11275] can: request_module (can-proto-0) failed. [ 336.353317][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 336.597770][ T6851] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 336.777787][ T6851] usb 6-1: Using ep0 maxpacket: 32 [ 336.782621][ T6851] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 336.790666][ T6851] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 336.794646][ T6851] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 336.798351][ T6851] usb 6-1: Product: syz [ 336.799809][ T6851] usb 6-1: Manufacturer: syz [ 336.801258][ T6851] usb 6-1: SerialNumber: syz [ 336.804325][ T6851] usb 6-1: config 0 descriptor?? [ 336.806785][T11273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.973561][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 337.222872][ T6851] usb 6-1: USB disconnect, device number 55 [ 337.409461][T11308] can: request_module (can-proto-0) failed. [ 337.414379][ T5211] Bluetooth: hci3: unexpected event 0x07 length: 283 > 255 [ 337.537675][ T1262] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 337.717611][ T1262] usb 5-1: Using ep0 maxpacket: 32 [ 337.741397][ T1262] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 337.755466][ T1262] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 337.760177][ T1262] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 337.763322][ T1262] usb 5-1: Product: syz [ 337.764765][ T1262] usb 5-1: Manufacturer: syz [ 337.766377][ T1262] usb 5-1: SerialNumber: syz [ 337.771172][ T1262] usb 5-1: config 0 descriptor?? [ 337.773646][T11305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.060803][ T5211] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 338.365239][T11334] can: request_module (can-proto-0) failed. [ 338.384639][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 339.118377][ T5211] Bluetooth: hci0: command tx timeout [ 339.322171][T11367] can: request_module (can-proto-0) failed. [ 339.329931][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 340.280520][ T5474] usb 5-1: USB disconnect, device number 44 [ 341.183294][T11426] can: request_module (can-proto-0) failed. [ 341.225468][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 341.477862][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 341.667708][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 341.676031][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.691071][ T10] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.696380][ T10] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.701848][ T10] usb 8-1: Product: syz [ 341.703932][ T10] usb 8-1: Manufacturer: syz [ 341.708001][ T10] usb 8-1: SerialNumber: syz [ 341.714556][ T10] usb 8-1: config 0 descriptor?? [ 341.722093][T11432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 343.318785][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 343.326840][T11485] can: request_module (can-proto-0) failed. [ 344.202171][ T1936] usb 8-1: USB disconnect, device number 61 [ 344.675150][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 345.241969][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 345.427594][ T1936] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 345.627622][ T1936] usb 7-1: Using ep0 maxpacket: 32 [ 345.635346][ T1936] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 345.644153][ T1936] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.657655][ T1936] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.660509][ T1936] usb 7-1: Product: syz [ 345.662388][ T1936] usb 7-1: Manufacturer: syz [ 345.664628][ T1936] usb 7-1: SerialNumber: syz [ 345.679360][ T1936] usb 7-1: config 0 descriptor?? [ 345.682323][T11540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.754155][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 346.887729][ T5211] Bluetooth: hci0: command tx timeout [ 347.497637][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 347.895906][T11608] can: request_module (can-proto-0) failed. [ 347.923952][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 348.028217][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 348.132477][ T1936] usb 7-1: USB disconnect, device number 46 [ 348.618601][T11641] can: request_module (can-proto-0) failed. [ 348.843601][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 348.967854][ T5211] Bluetooth: hci0: command tx timeout [ 349.037767][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 349.186359][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 349.235396][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 350.018847][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 350.021893][T11690] can: request_module (can-proto-0) failed. [ 350.059310][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 350.092329][T11697] can: request_module (can-proto-0) failed. [ 350.637135][ T5211] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 350.690344][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 351.037645][ T5211] Bluetooth: hci0: command tx timeout [ 351.305045][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 351.437690][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 351.472050][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 351.730685][T11762] can: request_module (can-proto-0) failed. [ 352.170046][T11772] can: request_module (can-proto-0) failed. [ 352.191383][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 352.196542][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 353.072346][T11818] can: request_module (can-proto-0) failed. [ 353.086088][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 353.127674][ T5211] Bluetooth: hci0: command tx timeout [ 353.519086][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 354.551432][T11881] can: request_module (can-proto-0) failed. [ 354.555989][ T5211] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 355.207987][ T5211] Bluetooth: hci0: command tx timeout [ 355.597993][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 355.986644][T11927] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2157'. [ 356.144792][T11937] can: request_module (can-proto-0) failed. [ 356.157953][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 356.636749][T11966] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2167'. [ 356.975764][ T5211] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 357.282384][ T5211] Bluetooth: hci0: command tx timeout [ 357.464389][T11997] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2176'. [ 357.677737][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 357.791989][ T39] audit: type=1400 audit(1719639304.877:102): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12009 comm="syz.0.2180" [ 357.855496][ T5211] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 357.897839][T12015] misc userio: Begin command sent, but we're already running [ 357.904154][T12015] misc userio: Begin command sent, but we're already running [ 357.907096][T12015] misc userio: Begin command sent, but we're already running [ 357.918458][T12015] misc userio: Begin command sent, but we're already running [ 358.009335][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 358.159697][T12030] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2185'. [ 358.624748][T12070] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2196'. [ 358.751278][T12072] can: request_module (can-proto-0) failed. [ 358.756104][ T5206] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 359.357944][ T5206] Bluetooth: hci0: command tx timeout [ 359.597016][T12130] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 359.614367][T12130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.767588][ T5206] Bluetooth: hci3: command 0x0406 tx timeout [ 360.118749][T12159] can: request_module (can-proto-0) failed. [ 360.126665][ T5206] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 360.268434][ T1262] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 360.477776][ T1262] usb 5-1: Using ep0 maxpacket: 8 [ 360.490323][ T1262] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 360.499331][ T1262] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.503245][ T1262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.506713][ T1262] usb 5-1: Product: syz [ 360.509978][ T1262] usb 5-1: Manufacturer: syz [ 360.512013][ T1262] usb 5-1: SerialNumber: syz [ 360.723092][T12146] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20003 [ 360.731375][ T1262] usb 5-1: USB disconnect, device number 45 [ 361.135080][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'. [ 361.547562][ T39] audit: type=1800 audit(1719639308.627:103): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2242" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 361.667854][T12223] tmpfs: Unknown parameter 'grpquota¦áÑ'åÕ)/;žg’]–ÓKp$O%VŠ9Âý [ 361.667854][T12223] ÐùþI¶½­ [ 361.667854][T12223] Ê'w‡2‡ÊÖÂDþ2' [ 361.716713][T12223] netlink: 'syz.3.2243': attribute type 4 has an invalid length. [ 361.847927][ T5206] Bluetooth: hci3: command 0x0406 tx timeout [ 362.044295][T12234] fuse: Unknown parameter '¨' [ 362.058359][ T5206] Bluetooth: hci2: unexpected cc 0x100c length: 11 > 3 [ 362.115305][ T5211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.124073][ T5211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.129991][ T5211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.138576][ T5211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.142436][ T5211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.145343][ T5211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.180805][T12250] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 362.295061][T12241] chnl_net:caif_netlink_parms(): no params data found [ 362.386196][ T5206] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 362.422057][T12241] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.427091][T12241] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.430289][T12241] bridge_slave_0: entered allmulticast mode [ 362.433148][T12241] bridge_slave_0: entered promiscuous mode [ 362.437140][T12241] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.440287][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.440434][T12274] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 362.442642][T12241] bridge_slave_1: entered allmulticast mode [ 362.449470][T12241] bridge_slave_1: entered promiscuous mode [ 362.494899][T12241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.501660][T12241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.550323][T12241] team0: Port device team_slave_0 added [ 362.556071][T12241] team0: Port device team_slave_1 added [ 362.603557][T12241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.606128][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.615787][T12241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.620930][T12241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.623379][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.634091][T12241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.686542][T12241] hsr_slave_0: entered promiscuous mode [ 362.690117][T12241] hsr_slave_1: entered promiscuous mode [ 362.837011][T12241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.913618][T12241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.978226][T12241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.240594][T12241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.251563][T12241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.265316][T12241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.272892][T12241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.370847][ T11] bridge_slave_1: left allmulticast mode [ 363.373432][ T11] bridge_slave_1: left promiscuous mode [ 363.376152][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.428798][ T5206] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 363.479623][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 363.690736][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.694624][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 363.699307][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.703137][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.715582][T12299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.756283][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.773085][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.779490][ T11] bond0 (unregistering): Released all slaves [ 363.836147][T12241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.853287][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.870482][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.873655][ T5261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.887054][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.890171][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.909528][T12321] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 363.929873][T12241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.066730][T12241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.095802][ T11] hsr_slave_0: left promiscuous mode [ 364.097272][T12336] netlink: 'syz.0.2268': attribute type 10 has an invalid length. [ 364.104447][ T11] hsr_slave_1: left promiscuous mode [ 364.105138][ T5263] usb 7-1: USB disconnect, device number 47 [ 364.112438][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.115376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.122217][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.125494][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.176473][ T11] veth1_macvtap: left promiscuous mode [ 364.178734][ T11] veth0_macvtap: left promiscuous mode [ 364.180771][ T11] veth1_vlan: left promiscuous mode [ 364.182676][ T11] veth0_vlan: left promiscuous mode [ 364.238233][ T5206] Bluetooth: hci4: command tx timeout [ 364.487972][ T5206] Bluetooth: hci0: command tx timeout [ 364.911805][ T5206] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 364.941796][ T1936] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 365.113241][ T11] team0 (unregistering): Port device team_slave_1 removed [ 365.137540][ T1936] usb 7-1: Using ep0 maxpacket: 16 [ 365.140697][ T1936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.144587][ T1936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.148366][ T1936] usb 7-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 365.151544][ T1936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.155576][ T1936] usb 7-1: config 0 descriptor?? [ 365.215357][ T11] team0 (unregistering): Port device team_slave_0 removed [ 365.601582][ T5211] Bluetooth: hci3: command 0x0406 tx timeout [ 365.608476][ T1936] lenovo 0003:17EF:6009.0004: hidraw1: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 365.885710][T12341] netlink: 'syz.3.2270': attribute type 6 has an invalid length. [ 365.922579][T12241] veth0_vlan: entered promiscuous mode [ 365.939129][T12241] veth1_vlan: entered promiscuous mode [ 365.957137][T12241] veth0_macvtap: entered promiscuous mode [ 365.964740][T12241] veth1_macvtap: entered promiscuous mode [ 365.974322][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.979288][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.982671][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.986739][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.991220][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.994679][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.999375][T12241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.006140][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.010709][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.014366][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.018119][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.021554][T12241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.025168][T12241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.029665][T12241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.036809][T12241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.042244][T12241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.046064][T12241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.050225][T12241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.078656][ T5206] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.082462][ T5206] Bluetooth: hci2: Injecting HCI hardware error event [ 366.088588][ T5211] Bluetooth: hci2: hardware error 0x00 [ 366.111148][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.114374][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.121989][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.124685][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.323023][ T5206] Bluetooth: hci4: command tx timeout [ 366.442289][ T1262] usb 7-1: USB disconnect, device number 48 [ 366.482363][T12367] fuse: Bad value for 'fd' [ 366.482504][ T39] audit: type=1800 audit(1719639313.557:104): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2276" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 366.497677][ T39] audit: type=1800 audit(1719639313.567:105): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2276" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 366.602477][T12365] capability: warning: `syz.0.2275' uses deprecated v2 capabilities in a way that may be insecure [ 366.706244][T12379] netlink: 'syz.0.2278': attribute type 10 has an invalid length. [ 366.866434][T12383] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.980107][T12386] 9pnet_fd: Insufficient options for proto=fd [ 367.117694][ T5206] Bluetooth: hci0: command tx timeout [ 367.508525][T12398] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 367.677887][ T5206] Bluetooth: hci3: command 0x0406 tx timeout [ 368.167846][ T5211] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 368.378062][T12418] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 368.380461][T12418] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 368.386236][T12418] vhci_hcd vhci_hcd.0: Device attached [ 368.394079][T12421] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 368.398319][ T5206] Bluetooth: hci4: command tx timeout [ 368.409162][ T11] vhci_hcd: stop threads [ 368.411464][ T11] vhci_hcd: release socket [ 368.413707][ T11] vhci_hcd: disconnect device [ 368.877844][T12437] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 369.291945][T12449] tipc: Started in network mode [ 369.294706][T12449] tipc: Node identity aa4e82bd2b79, cluster identity 4711 [ 369.302671][T12449] tipc: Enabled bearer , priority 0 [ 369.307779][T12449] ªªªªªª: renamed from syzkaller0 [ 369.312849][T12449] tipc: Disabling bearer [ 369.717916][T12456] fuse: Bad value for 'fd' [ 370.051088][T12472] input: syz0 as /devices/virtual/input/input19 [ 370.183443][T12476] input: syz0 as /devices/virtual/input/input20 [ 370.188497][T12474] tipc: Enabled bearer , priority 0 [ 370.193795][T12474] ªªªªªª: renamed from syzkaller0 [ 370.200572][T12474] tipc: Disabling bearer [ 370.237653][ T5211] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 370.331547][T12480] input: syz0 as /devices/virtual/input/input21 [ 370.487637][ T5211] Bluetooth: hci4: command tx timeout [ 370.787683][ T1936] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 370.991399][ T1936] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=20.fa [ 370.994620][ T1936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.004725][ T1936] usb 5-1: Product: syz [ 371.006679][ T1936] usb 5-1: Manufacturer: syz [ 371.009218][ T1936] usb 5-1: SerialNumber: syz [ 371.014385][ T1936] usb 5-1: config 0 descriptor?? [ 371.018540][ T1936] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 371.231101][ T25] usb 5-1: USB disconnect, device number 46 [ 371.375247][T12506] input: syz0 as /devices/virtual/input/input22 [ 371.529893][T12508] tipc: Started in network mode [ 371.531929][T12508] tipc: Node identity b245ec659774, cluster identity 4711 [ 371.535204][T12508] tipc: Enabled bearer , priority 0 [ 371.542799][T12508] ªªªªªª: renamed from syzkaller0 [ 371.546661][T12508] tipc: Disabling bearer [ 371.647543][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'. [ 371.651484][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'. [ 372.545245][T12546] tipc: Started in network mode [ 372.547056][T12546] tipc: Node identity d296bb856291, cluster identity 4711 [ 372.549801][T12546] tipc: Enabled bearer , priority 0 [ 372.559481][T12546] ªªªªªª: renamed from syzkaller0 [ 372.568999][T12546] tipc: Disabling bearer [ 372.669278][ T5206] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 372.887605][ T1936] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 372.896416][T12554] can: request_module (can-proto-0) failed. [ 372.903658][ T5206] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 373.073730][ T1936] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=20.fa [ 373.079654][ T1936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.082691][ T1936] usb 7-1: Product: syz [ 373.084202][ T1936] usb 7-1: Manufacturer: syz [ 373.085806][ T1936] usb 7-1: SerialNumber: syz [ 373.088943][ T1936] usb 7-1: config 0 descriptor?? [ 373.091896][ T1936] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 373.177347][T12561] can: request_module (can-proto-0) failed. [ 373.193269][ T5206] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 373.326557][T12337] usb 7-1: USB disconnect, device number 49 [ 374.327619][ T5206] Bluetooth: hci4: command 0x0405 tx timeout [ 374.798161][ T5202] Bluetooth: hci0: command tx timeout [ 374.814314][T12601] can: request_module (can-proto-0) failed. [ 374.821989][ T5202] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 374.914641][ T5206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.929067][ T5206] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.933277][ T5206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.936518][ T5206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.939686][ T5206] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.942405][ T5206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.082954][T12605] chnl_net:caif_netlink_parms(): no params data found [ 375.183210][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.185726][T12605] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.188307][T12605] bridge_slave_0: entered allmulticast mode [ 375.191118][T12605] bridge_slave_0: entered promiscuous mode [ 375.194782][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.197286][T12605] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.200103][T12605] bridge_slave_1: entered allmulticast mode [ 375.203941][T12605] bridge_slave_1: entered promiscuous mode [ 375.261650][T12605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.270090][T12605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.343431][T12605] team0: Port device team_slave_0 added [ 375.352388][T12605] team0: Port device team_slave_1 added [ 375.392537][T12605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.395068][T12605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.404130][T12605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.409126][T12605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.411529][T12605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.420216][T12605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.490383][T12605] hsr_slave_0: entered promiscuous mode [ 375.493701][T12605] hsr_slave_1: entered promiscuous mode [ 375.496262][T12605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.501894][T12605] Cannot create hsr debugfs directory [ 375.691646][T12618] can: request_module (can-proto-0) failed. [ 375.710431][ T5206] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 375.721648][T12605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.800592][T12605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.830250][T12624] netlink: 'syz.1.2352': attribute type 10 has an invalid length. [ 375.875565][T12605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.078711][T12605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.083777][T12605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.109054][T12605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.114338][T12605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.184692][T12605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.204207][T12605] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.211882][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.214396][ T5263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.230476][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.233115][ T5263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.360638][T12605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.396791][T12605] veth0_vlan: entered promiscuous mode [ 376.404768][T12605] veth1_vlan: entered promiscuous mode [ 376.430796][T12605] veth0_macvtap: entered promiscuous mode [ 376.435673][T12605] veth1_macvtap: entered promiscuous mode [ 376.457388][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.462528][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.468540][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.473237][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.477609][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.482232][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.486724][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.491399][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.498706][T12605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.506938][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.512912][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.516828][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.520950][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.524600][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.528453][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.531973][T12605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.535405][T12605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.539936][T12605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.546199][T12605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.549281][T12605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.553052][T12605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.555945][T12605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.627005][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.631036][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.660363][T12306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.665703][T12306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.718823][ T5206] Bluetooth: hci4: command 0x0405 tx timeout [ 376.921538][T12649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.957642][ T5211] Bluetooth: hci1: command tx timeout [ 376.997838][T12651] can: request_module (can-proto-0) failed. [ 377.004584][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 377.082167][T12661] bridge_slave_1: left allmulticast mode [ 377.086833][T12661] bridge_slave_1: left promiscuous mode [ 377.090099][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.103618][T12661] netlink: 'syz.0.2361': attribute type 2 has an invalid length. [ 377.107239][T12661] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 377.203365][T12659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.222892][ T5263] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 377.227006][ T5263] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 377.231621][T12667] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2363'. [ 377.323817][ T1086] wlan1: authenticated [ 377.325222][T12659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.340734][ T1086] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 377.400033][ T1086] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 377.400954][T12663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.403080][ T1086] wlan1: associated [ 377.660888][ T39] audit: type=1326 audit(1719639324.747:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12693 comm="syz.2.2370" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b4579 code=0x0 [ 378.309328][T12737] can: request_module (can-proto-0) failed. [ 378.317101][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 378.530917][T12750] can: request_module (can-proto-0) failed. [ 378.538495][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 378.652895][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660694][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.668854][T12764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2387'. [ 378.766663][T12766] kvm: MWAIT instruction emulated as NOP! [ 379.047621][ T5211] Bluetooth: hci1: command tx timeout [ 379.522936][T12812] can: request_module (can-proto-0) failed. [ 379.531404][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 380.318863][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 380.398978][T12828] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 381.088286][ T5206] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 381.117641][ T5206] Bluetooth: hci1: command tx timeout [ 381.411888][T12871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 381.414763][T12871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.420770][T12871] vhci_hcd vhci_hcd.0: Device attached [ 381.457293][T12872] vhci_hcd: connection closed [ 381.460611][ T63] vhci_hcd: stop threads [ 381.465102][ T63] vhci_hcd: release socket [ 381.468524][ T63] vhci_hcd: disconnect device [ 381.975688][T12887] can: request_module (can-proto-0) failed. [ 382.049453][T12896] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 382.478455][ T5206] Bluetooth: hci0: command tx timeout [ 382.926451][T12912] 9pnet_virtio: no channels available for device syz [ 383.023174][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.087365][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.147050][T12929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.208370][ T5206] Bluetooth: hci1: command 0x0419 tx timeout [ 383.213672][T12932] can: request_module (can-proto-0) failed. [ 383.223116][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 383.247448][T12937] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 383.756964][T12947] can: request_module (can-proto-0) failed. [ 383.773706][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 384.416090][ T5211] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 384.557770][ T5211] Bluetooth: hci0: command tx timeout [ 384.589512][T12980] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 384.688988][T12982] can: request_module (can-proto-0) failed. [ 384.695709][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 385.277726][ T5211] Bluetooth: hci1: command 0x0419 tx timeout [ 385.711396][ T5206] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 385.982963][T13037] netlink: 'syz.3.2468': attribute type 10 has an invalid length. [ 386.637781][ T5206] Bluetooth: hci0: command tx timeout [ 386.787699][T13048] can: request_module (can-proto-0) failed. [ 386.793433][ T5206] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 387.354568][T13073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.442464][ T5206] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 388.434612][ T5211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.444814][ T5211] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.459108][ T5211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.491551][ T5211] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.497406][ T5211] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.500971][ T5211] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.541485][T13112] can: request_module (can-proto-0) failed. [ 388.754222][T13107] chnl_net:caif_netlink_parms(): no params data found [ 388.799425][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.969223][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.976244][T13107] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.979481][T13107] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.984795][T13107] bridge_slave_0: entered allmulticast mode [ 388.989745][T13107] bridge_slave_0: entered promiscuous mode [ 388.995517][T13107] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.998380][T13107] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.000961][T13107] bridge_slave_1: entered allmulticast mode [ 389.004572][T13107] bridge_slave_1: entered promiscuous mode [ 389.064141][T13107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.091130][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.102458][T13107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.158343][T13145] can: request_module (can-proto-0) failed. [ 389.163767][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 389.164254][T13107] team0: Port device team_slave_0 added [ 389.176264][T13107] team0: Port device team_slave_1 added [ 389.248631][T13107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.251604][T13107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.266470][T13107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.278518][T13107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.281554][T13107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.293633][T13107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.382588][T13107] hsr_slave_0: entered promiscuous mode [ 389.386135][T13107] hsr_slave_1: entered promiscuous mode [ 389.395330][T13107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.399488][T13107] Cannot create hsr debugfs directory [ 389.465943][ T63] bridge_slave_0: left allmulticast mode [ 389.469791][ T63] bridge_slave_0: left promiscuous mode [ 389.472312][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.855302][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.864614][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.871229][ T63] bond0 (unregistering): Released all slaves [ 389.926285][T13213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.040522][ T63] tipc: Left network mode [ 390.066486][T13195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.137269][T13195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.417279][ T63] hsr_slave_0: left promiscuous mode [ 390.420365][ T63] hsr_slave_1: left promiscuous mode [ 390.427071][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.430955][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.434295][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.437038][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.465326][ T63] veth1_macvtap: left promiscuous mode [ 390.469904][ T63] veth0_macvtap: left promiscuous mode [ 390.471927][ T63] veth1_vlan: left promiscuous mode [ 390.473795][ T63] veth0_vlan: left promiscuous mode [ 390.570298][ T5211] Bluetooth: hci5: command tx timeout [ 390.671031][T13261] can: request_module (can-proto-0) failed. [ 390.682150][ T5211] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 391.476284][ T63] team0 (unregistering): Port device team_slave_1 removed [ 391.629784][ T63] team0 (unregistering): Port device team_slave_0 removed [ 391.678465][T13274] can: request_module (can-proto-0) failed. [ 391.684643][ T5206] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 392.637752][ T5206] Bluetooth: hci5: command tx timeout [ 392.820293][T13107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.838709][T13107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.855217][T13107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.883652][T13107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.931833][T13306] input: syz0 as /devices/virtual/input/input24 [ 392.973942][T13309] can: request_module (can-proto-0) failed. [ 392.974590][T13306] kcapi: manufacturer command 0 unknown. [ 392.979045][ T5206] Bluetooth: hci4: unexpected event 0x07 length: 283 > 255 [ 393.011146][T13107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.013994][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2513'. [ 393.065331][T13107] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.078444][T12337] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.080885][T12337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.094902][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.097772][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.197716][ T5206] Bluetooth: hci1: command 0x0419 tx timeout [ 393.320697][T13107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.413181][T13107] veth0_vlan: entered promiscuous mode [ 393.426711][T13107] veth1_vlan: entered promiscuous mode [ 393.468357][T13107] veth0_macvtap: entered promiscuous mode [ 393.479501][T13107] veth1_macvtap: entered promiscuous mode [ 393.501163][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.507131][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.511092][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.515760][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.519709][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.524376][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.528596][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.532591][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.543672][T13107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.563977][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.567418][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.571087][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.575559][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.579930][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.584460][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.589025][T13107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.593566][T13107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.600108][T13107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.614815][T13107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.619224][T13107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.623285][T13107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.627342][T13107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.714629][T12711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.718784][T12711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.746561][T12711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.751937][T12711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.222275][ T39] audit: type=1326 audit(1719639341.307:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.1.2518" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7426579 code=0x0 [ 394.253487][T13333] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.439327][ T39] audit: type=1326 audit(1719639341.527:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.447594][ T39] audit: type=1326 audit(1719639341.527:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.455246][ T39] audit: type=1326 audit(1719639341.527:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.463835][ T39] audit: type=1326 audit(1719639341.527:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.472614][ T39] audit: type=1326 audit(1719639341.537:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=197 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.485030][ T39] audit: type=1326 audit(1719639341.537:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.493331][ T39] audit: type=1326 audit(1719639341.537:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.500802][ T39] audit: type=1326 audit(1719639341.547:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=197 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.507909][ T39] audit: type=1326 audit(1719639341.547:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.2519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7410579 code=0x7ffc0000 [ 394.717768][ T5211] Bluetooth: hci5: command tx timeout [ 395.001806][T13353] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2523'. [ 395.516040][T13373] netlink: 'syz.0.2529': attribute type 10 has an invalid length. [ 395.825778][T13392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.861308][T13393] input: syz0 as /devices/virtual/input/input25 [ 395.898441][T13392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.982990][T13398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.012416][T13393] kcapi: manufacturer command 0 unknown. [ 396.089836][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2536'. [ 396.162631][T13400] can: request_module (can-proto-0) failed. [ 396.341214][T13405] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2540'. [ 396.583156][T13412] syz.1.2543: attempt to access beyond end of device [ 396.583156][T13412] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 396.588631][T13412] EXT4-fs (nbd1): unable to read superblock [ 396.797600][ T5211] Bluetooth: hci5: command tx timeout [ 397.246473][T13434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.281718][ T5237] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 397.284719][ T5237] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 397.322685][ T1091] wlan1: authenticated [ 397.324946][T13434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.338323][ T45] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 397.402782][T12711] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 397.403267][T13434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.406358][T12711] wlan1: associated [ 397.643015][T13450] can: request_module (can-proto-0) failed. [ 397.647769][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 398.072610][T13471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.134362][T13471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.225900][T13481] can: request_module (can-proto-0) failed. [ 398.234889][ T5211] Bluetooth: hci5: unexpected event 0x07 length: 283 > 255 [ 398.705467][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'. [ 398.726362][T13504] netlink: 'syz.1.2574': attribute type 11 has an invalid length. [ 398.777918][T13506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.846073][T13506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.914529][T13506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.026629][T13519] can: request_module (can-proto-0) failed. [ 399.107614][ T1262] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 399.287730][ T1262] usb 6-1: Using ep0 maxpacket: 8 [ 399.290773][ T1262] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.294227][ T1262] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 399.297269][ T1262] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 399.303359][ T1262] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 399.307141][ T1262] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 399.310361][ T1262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.317017][ T1262] hub 6-1:1.0: bad descriptor, ignoring hub [ 399.320684][ T1262] hub 6-1:1.0: probe with driver hub failed with error -5 [ 399.324321][ T1262] cdc_wdm 6-1:1.0: skipping garbage [ 399.326162][ T1262] cdc_wdm 6-1:1.0: skipping garbage [ 399.330828][ T1262] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 399.332986][ T1262] cdc_wdm 6-1:1.0: Unknown control protocol [ 399.368075][T13533] netlink: 'syz.0.2584': attribute type 10 has an invalid length. [ 399.826725][T13511] kernel profiling enabled (shift: 2) [ 399.943538][T13511] syz.1.2576: vmalloc error: size 169869312, failed to allocated page array size 331776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 399.951977][T13511] CPU: 0 PID: 13511 Comm: syz.1.2576 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 399.956337][T13511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 399.960368][T13511] Call Trace: [ 399.961576][T13511] [ 399.962536][T13511] dump_stack_lvl+0x16c/0x1f0 [ 399.964242][T13511] warn_alloc+0x24d/0x3a0 [ 399.965861][T13511] ? __pfx_warn_alloc+0x10/0x10 [ 399.968326][T13511] ? profile_init+0x10a/0x170 [ 399.970392][T13511] ? __get_vm_area_node+0x190/0x2d0 [ 399.972416][T13511] ? __get_vm_area_node+0x1bc/0x2d0 [ 399.974686][T13511] __vmalloc_node_range_noprof+0xff7/0x1520 [ 399.977089][T13511] ? profile_init+0x10a/0x170 [ 399.978863][T13511] ? alloc_pages_mpol_noprof+0x2c1/0x610 [ 399.980864][T13511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.983013][T13511] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 399.985161][T13511] ? profile_init+0xc1/0x170 [ 399.986828][T13511] ? trace_kmalloc+0x2d/0xe0 [ 399.988427][T13511] ? profile_init+0x10a/0x170 [ 399.990024][T13511] ? __pfx_profiling_store+0x10/0x10 [ 399.991961][T13511] vzalloc_noprof+0x6b/0x90 [ 399.993480][T13511] ? profile_init+0x10a/0x170 [ 399.995344][T13511] profile_init+0x10a/0x170 [ 399.996915][T13511] profiling_store+0x65/0xe0 [ 399.998474][T13511] kobj_attr_store+0x55/0x80 [ 400.000107][T13511] ? __pfx_kobj_attr_store+0x10/0x10 [ 400.001997][T13511] sysfs_kf_write+0x117/0x170 [ 400.003779][T13511] kernfs_fop_write_iter+0x343/0x500 [ 400.005758][T13511] ? __pfx_sysfs_kf_write+0x10/0x10 [ 400.007505][T13511] vfs_write+0x6b6/0x1140 [ 400.008955][T13511] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 400.010958][T13511] ? __pfx_vfs_write+0x10/0x10 [ 400.012740][T13511] ? __pfx___mutex_lock+0x10/0x10 [ 400.014432][T13511] ? __fget_files+0x256/0x400 [ 400.016101][T13511] ksys_write+0x12f/0x260 [ 400.018115][T13511] ? __pfx_ksys_write+0x10/0x10 [ 400.019770][T13511] __do_fast_syscall_32+0x73/0x120 [ 400.021831][T13511] do_fast_syscall_32+0x32/0x80 [ 400.023434][T13553] can: request_module (can-proto-0) failed. [ 400.024097][T13511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.024160][T13511] RIP: 0023:0xf7426579 [ 400.024177][T13511] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 400.037074][T13511] RSP: 002b:00000000f5d1d57c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 400.040085][T13511] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000040 [ 400.043262][T13511] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 400.046189][T13511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.049314][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.052504][T13511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.055903][T13511] [ 400.057172][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.063510][T13511] Mem-Info: [ 400.064765][T13511] active_anon:2914 inactive_anon:18 isolated_anon:0 [ 400.064765][T13511] active_file:5114 inactive_file:40481 isolated_file:0 [ 400.064765][T13511] unevictable:768 dirty:415 writeback:0 [ 400.064765][T13511] slab_reclaimable:5432 slab_unreclaimable:58345 [ 400.064765][T13511] mapped:13799 shmem:1333 pagetables:665 [ 400.064765][T13511] sec_pagetables:349 bounce:0 [ 400.064765][T13511] kernel_misc_reclaimable:0 [ 400.064765][T13511] free:101181 free_pcp:2396 free_cma:0 [ 400.086227][T13511] Node 0 active_anon:144kB inactive_anon:52kB active_file:156kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5024kB dirty:132kB writeback:0kB shmem:2060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10096kB pagetables:1988kB sec_pagetables:1280kB all_unreclaimable? no [ 400.100468][T13511] Node 1 active_anon:15912kB inactive_anon:20kB active_file:20304kB inactive_file:161912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48124kB dirty:1528kB writeback:0kB shmem:3272kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1056kB pagetables:672kB sec_pagetables:116kB all_unreclaimable? no [ 400.115490][T13511] Node 0 DMA free:932kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:4kB free_cma:0kB [ 400.126435][T13511] lowmem_reserve[]: 0 374 0 0 0 [ 400.128545][T13511] Node 0 DMA32 free:25408kB boost:0kB min:19048kB low:23808kB high:28568kB reserved_highatomic:2048KB active_anon:364kB inactive_anon:0kB active_file:160kB inactive_file:4kB unevictable:1536kB writepending:132kB present:1032192kB managed:410816kB mlocked:0kB bounce:0kB free_pcp:2176kB local_pcp:988kB free_cma:0kB [ 400.139991][T13511] lowmem_reserve[]: 0 0 0 0 0 [ 400.141724][T13511] Node 1 DMA32 free:370640kB boost:0kB min:47048kB low:58808kB high:70568kB reserved_highatomic:0KB active_anon:19912kB inactive_anon:20kB active_file:20304kB inactive_file:161912kB unevictable:1536kB writepending:1528kB present:1048436kB managed:946208kB mlocked:0kB bounce:0kB free_pcp:6772kB local_pcp:2320kB free_cma:0kB [ 400.153121][T13511] lowmem_reserve[]: 0 0 0 0 0 [ 400.175505][T13511] Node 0 DMA: 20*4kB (U) 17*8kB (U) 9*16kB (U) 19*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 968kB [ 400.185638][T13511] Node 0 DMA32: 223*4kB (UME) 172*8kB (UMEH) 143*16kB (MEH) 152*32kB (UMEH) 64*64kB (UME) 21*128kB (ME) 12*256kB (ME) 7*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 25932kB [ 400.193295][T13511] Node 1 DMA32: 126*4kB (UE) 103*8kB (UME) 149*16kB (UME) 433*32kB (ME) 427*64kB (UME) 166*128kB (UME) 99*256kB (UME) 72*512kB (UME) 48*1024kB (ME) 3*2048kB (UM) 43*4096kB (UME) = 359776kB [ 400.206125][T13511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.209640][T13511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.212964][T13511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.216256][T13511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.219891][T13511] 47756 total pagecache pages [ 400.221574][T13511] 845 pages in swap cache [ 400.223066][T13511] Free swap = 111040kB [ 400.225199][T13511] Total swap = 124996kB [ 400.226665][T13511] 524155 pages RAM [ 400.228204][T13511] 0 pages HighMem/MovableOnly [ 400.229847][T13511] 181059 pages reserved [ 400.231422][T13511] 0 pages cma reserved [ 401.162594][T13613] can: request_module (can-proto-0) failed. [ 401.168104][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 402.076127][T13645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.152423][T13645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.213972][T13645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.342005][T13710] can: request_module (can-proto-0) failed. [ 403.347056][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 403.471526][T13718] Invalid ELF section header overflow [ 403.689790][T13724] can: request_module (can-proto-0) failed. [ 403.708241][ T5211] Bluetooth: hci5: unexpected event 0x07 length: 283 > 255 [ 404.358361][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 404.614087][T13758] Invalid ELF section header overflow [ 404.744269][T13762] can: request_module (can-proto-0) failed. [ 405.092277][T13776] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 405.095054][T13776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 405.100670][T13776] vhci_hcd vhci_hcd.0: Device attached [ 405.104717][T13777] vhci_hcd: cannot find the pending unlink 0 [ 405.113279][T13777] vhci_hcd: connection closed [ 405.114787][ T1087] vhci_hcd: stop threads [ 405.119863][ T1087] vhci_hcd: release socket [ 405.122273][ T1087] vhci_hcd: disconnect device [ 405.219154][T13780] netlink: zone id is out of range [ 405.221044][T13780] netlink: zone id is out of range [ 405.222777][T13780] netlink: zone id is out of range [ 405.225156][T13780] netlink: set zone limit has 4 unknown bytes [ 405.304559][T13782] can: request_module (can-proto-0) failed. [ 405.323747][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 405.728933][T13795] Invalid ELF section header overflow [ 406.006167][T13807] can: request_module (can-proto-0) failed. [ 406.012197][ T5206] Bluetooth: hci5: unexpected event 0x07 length: 283 > 255 [ 406.141457][T13812] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.2668'. [ 406.152823][T13813] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.2668'. [ 406.223237][T13817] can: request_module (can-proto-0) failed. [ 406.231468][ T5206] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 406.494517][T13828] can: request_module (can-proto-0) failed. [ 406.903808][T13833] Invalid ELF section header overflow [ 407.026509][T13836] netlink: 'syz.0.2674': attribute type 10 has an invalid length. [ 407.576700][T13856] netlink: 'syz.3.2680': attribute type 13 has an invalid length. [ 407.581988][T13856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2680'. [ 407.587228][T13856] syz_tun: refused to change device tx_queue_len [ 407.589928][T13856] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 407.592210][T13860] Invalid ELF section header overflow [ 407.718448][T13871] fuse: Bad value for 'group_id' [ 407.816960][T13873] can: request_module (can-proto-0) failed. [ 408.078500][ T5206] Bluetooth: hci5: command 0x0406 tx timeout [ 408.205372][T13895] Invalid ELF section header overflow [ 408.352386][T13907] netlink: 'syz.0.2696': attribute type 10 has an invalid length. [ 408.690332][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.805149][T13923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.921069][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.925187][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.932356][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.936401][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.939907][ T5202] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.944371][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.109191][T13925] chnl_net:caif_netlink_parms(): no params data found [ 409.211362][T13925] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.214339][T13925] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.217450][T13925] bridge_slave_0: entered allmulticast mode [ 409.221205][T13925] bridge_slave_0: entered promiscuous mode [ 409.225615][T13925] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.228254][T13925] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.230880][T13925] bridge_slave_1: entered allmulticast mode [ 409.234193][T13925] bridge_slave_1: entered promiscuous mode [ 409.291731][T13925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.297410][T13925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.335433][T13942] can: request_module (can-proto-0) failed. [ 409.341549][ T5202] Bluetooth: hci5: unexpected event 0x07 length: 283 > 255 [ 409.346347][T13925] team0: Port device team_slave_0 added [ 409.353542][T13925] team0: Port device team_slave_1 added [ 409.418055][T13925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.420522][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.430846][T13925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.435768][T13925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.438722][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.450642][T13925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.528849][T13925] hsr_slave_0: entered promiscuous mode [ 409.531664][T13925] hsr_slave_1: entered promiscuous mode [ 409.535546][T13925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.539954][T13925] Cannot create hsr debugfs directory [ 409.614558][T13960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2710'. [ 409.732243][T13925] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.809699][ T39] kauditd_printk_skb: 96 callbacks suppressed [ 409.809714][ T39] audit: type=1804 audit(1719639356.897:213): pid=13961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2710" name="/syzkaller.QD6hoq/101/bus" dev="sda1" ino=1964 res=1 errno=0 [ 409.881760][T13925] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.975291][T13925] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.982326][T13965] netlink: 'syz.2.2711': attribute type 10 has an invalid length. [ 410.353772][T13925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.374222][T13925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.380442][T13925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.385359][T13925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.413746][T13972] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 410.417038][T13972] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 410.423249][ T1087] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 410.426355][T13972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.453111][T13925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.469941][T13925] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.478509][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.481050][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.484708][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.487266][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.508525][T13972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.509139][T12711] wlan1: authenticated [ 410.527624][ T1087] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 410.530904][ T1087] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 410.538520][ T1087] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 410.547717][ T1087] wlan1: association with 08:02:11:00:00:00 timed out [ 410.569653][T13980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.656190][T13925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.689233][T13925] veth0_vlan: entered promiscuous mode [ 410.700453][T13925] veth1_vlan: entered promiscuous mode [ 410.723249][T13925] veth0_macvtap: entered promiscuous mode [ 410.727995][T13925] veth1_macvtap: entered promiscuous mode [ 410.738140][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.741643][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.744973][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.749571][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.752887][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.756490][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.759992][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.763483][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.766777][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.770876][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.776933][T13925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.785160][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.789079][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.792400][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.795921][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.799803][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.803297][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.806674][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.810295][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.813581][T13925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.817062][T13925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.822407][T13925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.831027][T13925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.834412][T13925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.837433][T13925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.842862][T13925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.938928][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.942314][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.949564][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.952563][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.037725][ T5202] Bluetooth: hci0: command tx timeout [ 411.453918][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 411.478135][T14017] macsec0: entered promiscuous mode [ 411.481603][T14017] macsec1: entered promiscuous mode [ 411.514607][T14023] netlink: 'syz.1.2725': attribute type 10 has an invalid length. [ 411.570595][T14029] Invalid ELF section header overflow [ 411.646416][T14027] can: request_module (can-proto-0) failed. [ 411.677403][T14034] can: request_module (can-proto-0) failed. [ 411.685545][ T5202] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 412.479937][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 412.501899][T14057] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.763434][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.800736][T12337] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 412.804307][T12337] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 412.860491][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.861370][ T45] wlan1: authenticated [ 412.867995][ T45] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 412.966976][ T1087] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 412.967025][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.970305][ T1087] wlan1: associated [ 413.127649][ T5202] Bluetooth: hci0: command tx timeout [ 413.376921][T14083] Invalid ELF section header overflow [ 413.436595][T14084] can: request_module (can-proto-0) failed. [ 413.449552][ T5202] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 413.784002][T14095] can: request_module (can-proto-0) failed. [ 413.808558][ T5202] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 414.348098][T14112] Invalid ELF section header overflow [ 414.834393][T14132] Invalid ELF section header overflow [ 414.877125][T14133] can: request_module (can-proto-0) failed. [ 415.200451][ T5202] Bluetooth: hci0: command tx timeout [ 415.837450][T14161] fuse: Unknown parameter 'use00000000000000000000' [ 415.984399][T14176] netlink: 'syz.1.2777': attribute type 10 has an invalid length. [ 416.013445][T14174] can: request_module (can-proto-0) failed. [ 416.021547][ T5202] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 416.664275][T14180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.735638][T14180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.796857][T14180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.842002][T14184] Invalid ELF section header overflow [ 417.190743][T14194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.272788][T14194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.277675][ T5202] Bluetooth: hci0: command tx timeout [ 417.341812][T14195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.424037][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.483326][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.541926][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.848575][T14213] can: request_module (can-proto-0) failed. [ 417.853922][ T5202] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 418.503818][ T39] audit: type=1804 audit(1719639365.587:214): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2799" name="/syzkaller.IqpRRB/253/bus" dev="sda1" ino=1973 res=1 errno=0 [ 418.511739][T14236] netlink: 'syz.2.2799': attribute type 23 has an invalid length. [ 418.684867][T14244] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 418.709565][T14246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.778856][T14246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.835481][T14246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.494517][T14268] Invalid ELF section header overflow [ 419.672660][T14278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.742386][T14278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.803331][T14278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.986760][T14284] can: request_module (can-proto-0) failed. [ 419.996987][ T5202] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 420.044356][T14287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.106140][T14287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.164008][T14287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.510419][T14295] netlink: 'syz.2.2818': attribute type 10 has an invalid length. [ 420.712201][T14297] Invalid ELF section header overflow [ 421.236706][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.280203][T14328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.339189][T14328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.387654][T14332] can: request_module (can-proto-0) failed. [ 421.395750][T14328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.254450][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.287140][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 422.305587][T14349] bridge_slave_1: left allmulticast mode [ 422.308870][T14349] bridge_slave_1: left promiscuous mode [ 422.311155][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.328197][T14349] bridge1: port 1(bridge_slave_1) entered blocking state [ 422.330217][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.330833][T14349] bridge1: port 1(bridge_slave_1) entered disabled state [ 422.337926][T14349] bridge_slave_1: entered allmulticast mode [ 422.342173][T14349] bridge_slave_1: entered promiscuous mode [ 422.362059][T14352] netlink: 'syz.1.2836': attribute type 10 has an invalid length. [ 422.396391][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.606528][ T5211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 422.613201][ T5211] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 422.619635][ T5211] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 422.627877][ T5211] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 422.634218][ T5211] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 422.637635][ T5211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 422.787367][T14369] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2842'. [ 422.804472][T14364] chnl_net:caif_netlink_parms(): no params data found [ 422.881236][T14374] can: request_module (can-proto-0) failed. [ 422.930013][T14364] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.933202][T14364] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.936249][T14364] bridge_slave_0: entered allmulticast mode [ 422.941959][T14364] bridge_slave_0: entered promiscuous mode [ 422.946442][T14364] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.949331][T14364] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.951841][T14364] bridge_slave_1: entered allmulticast mode [ 422.954632][T14364] bridge_slave_1: entered promiscuous mode [ 422.995344][T14364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.001010][T14364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.082640][T14364] team0: Port device team_slave_0 added [ 423.086984][T14364] team0: Port device team_slave_1 added [ 423.127757][T14364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.129854][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.139797][T14364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.145515][T14364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.147791][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.155388][T14364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.221670][T14364] hsr_slave_0: entered promiscuous mode [ 423.224511][T14364] hsr_slave_1: entered promiscuous mode [ 423.228880][T14364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.232030][T14364] Cannot create hsr debugfs directory [ 423.405774][T14400] Invalid ELF section header overflow [ 423.446962][T14364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.551620][T14364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.607265][T14405] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2851'. [ 423.632356][T14364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.709063][T14410] netlink: 'syz.3.2852': attribute type 10 has an invalid length. [ 423.780832][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.860792][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.910157][T14364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.916568][T14364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 423.928017][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.935156][T14364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.955487][T14364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.043946][T14364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.062594][T14364] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.074547][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.078355][ T5694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.100542][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.103111][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.134328][T14364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.139372][T14364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.297043][T14364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.338230][T14364] veth0_vlan: entered promiscuous mode [ 424.347156][T14364] veth1_vlan: entered promiscuous mode [ 424.377859][T14364] veth0_macvtap: entered promiscuous mode [ 424.383797][T14364] veth1_macvtap: entered promiscuous mode [ 424.400327][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.404302][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.410124][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.413872][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.417322][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.421558][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.424993][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.430415][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.433809][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.438035][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.442289][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.446256][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.453051][T14364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.459498][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.463127][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.466972][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.470599][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.474073][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.478678][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.482152][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.485756][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.490361][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.495602][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.499979][T14364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.504398][T14364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.511951][T14364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.521575][T14364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.525287][T14364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.529060][T14364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.532507][T14364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.542476][T14428] Invalid ELF section header overflow [ 424.617601][T12711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.620371][T12711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.646554][T12711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.650762][T12711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.721537][ T5211] Bluetooth: hci6: command tx timeout [ 424.764777][T14436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.838413][ T5694] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 424.841515][ T5694] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 424.846304][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 424.846324][ T45] wlan1: authenticated [ 424.858773][T14439] can: request_module (can-proto-0) failed. [ 424.868150][T14436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.868173][ T45] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 424.949452][T14447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.949632][ T1087] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 424.975524][ T1087] wlan1: associated [ 425.607810][T14467] Invalid ELF section header overflow [ 425.663380][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.707394][T14472] can: request_module (can-proto-0) failed. [ 425.725134][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 425.747854][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.827183][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.658020][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.701453][T14505] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.725253][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.785264][T14509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.797767][ T5211] Bluetooth: hci6: command tx timeout [ 426.811326][T14511] Invalid ELF section header overflow [ 426.900782][T14513] can: request_module (can-proto-0) failed. [ 426.905344][ T5211] Bluetooth: hci1: unexpected event 0x07 length: 283 > 255 [ 428.642963][T14570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.704250][T14570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.761803][T14570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.884036][ T5211] Bluetooth: hci6: command tx timeout [ 428.975117][T14588] can: request_module (can-proto-0) failed. [ 429.881861][T14637] can: request_module (can-proto-0) failed. [ 429.900751][ T5211] Bluetooth: hci0: unexpected event 0x07 length: 283 > 255 [ 430.241818][T14648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.328724][T14648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.389945][T14648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.522663][T14656] can: request_module (can-proto-0) failed. [ 430.532873][ T5211] Bluetooth: hci6: unexpected event 0x07 length: 283 > 255 [ 430.720736][ T1936] usb 6-1: USB disconnect, device number 56 [ 430.738646][ T45] bridge_slave_1: left allmulticast mode [ 430.741234][ T45] bridge_slave_1: left promiscuous mode [ 430.744066][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.749549][ T45] bridge_slave_0: left allmulticast mode [ 430.752212][ T45] bridge_slave_0: left promiscuous mode [ 430.754867][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.183728][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.191739][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.198705][ T45] bond0 (unregistering): Released all slaves [ 431.328815][ T45] tipc: Left network mode [ 431.669405][ T45] hsr_slave_0: left promiscuous mode [ 431.674935][ T45] hsr_slave_1: left promiscuous mode [ 431.686170][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.690044][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.693770][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.697303][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.761451][ T45] veth1_macvtap: left promiscuous mode [ 431.763511][ T45] veth0_macvtap: left promiscuous mode [ 431.765898][ T45] veth1_vlan: left promiscuous mode [ 431.769563][ T45] veth0_vlan: left promiscuous mode [ 432.761638][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.770923][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.781712][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.801995][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.808408][ T5202] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.811788][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.008789][ T45] team0 (unregistering): Port device team_slave_1 removed [ 433.150160][ T45] team0 (unregistering): Port device team_slave_0 removed [ 433.208849][ T5211] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 433.212991][ T5211] Bluetooth: hci6: Injecting HCI hardware error event [ 433.219158][ T5202] Bluetooth: hci6: hardware error 0x00 [ 434.176303][T14723] chnl_net:caif_netlink_parms(): no params data found [ 434.471169][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.484714][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.493554][T14723] bridge_slave_0: entered allmulticast mode [ 434.509050][T14723] bridge_slave_0: entered promiscuous mode [ 434.531933][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.539793][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.554091][T14723] bridge_slave_1: entered allmulticast mode [ 434.569384][T14723] bridge_slave_1: entered promiscuous mode [ 434.703004][T14723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.722996][T14723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.818747][T14723] team0: Port device team_slave_0 added [ 434.827268][T14723] team0: Port device team_slave_1 added [ 434.877804][ T5211] Bluetooth: hci2: command tx timeout [ 434.879624][T14770] syz_tun: entered promiscuous mode [ 434.887308][T14770] batadv_slave_1: entered promiscuous mode [ 434.930267][T14723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.933360][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.949748][T14723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.955117][T14723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.957432][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.975096][T14723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.000951][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.019900][T14780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.101784][T14723] hsr_slave_0: entered promiscuous mode [ 435.105295][T14723] hsr_slave_1: entered promiscuous mode [ 435.141171][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.174155][T14780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.241301][T14780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.309116][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.357625][ T5202] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 435.578592][ T45] bridge_slave_0: left allmulticast mode [ 435.580381][ T45] bridge_slave_0: left promiscuous mode [ 435.582131][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.590121][ T45] bridge_slave_1: left allmulticast mode [ 435.592019][ T45] bridge_slave_1: left promiscuous mode [ 435.594131][ T45] bridge1: port 1(bridge_slave_1) entered disabled state [ 435.930479][T14827] fuse: Unknown parameter 'oytmode' [ 436.265431][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.271138][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.277585][ T45] bond0 (unregistering): Released all slaves [ 436.377358][ T45] tipc: Left network mode [ 436.584263][T14846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.650383][T14846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.706673][T14846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.920940][ T45] hsr_slave_0: left promiscuous mode [ 436.931674][ T45] hsr_slave_1: left promiscuous mode [ 436.941691][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.944314][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.950897][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.953801][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.970942][ T5211] Bluetooth: hci2: command tx timeout [ 436.987847][ T45] veth1_macvtap: left promiscuous mode [ 436.989860][ T45] veth0_macvtap: left promiscuous mode [ 436.991882][ T45] veth1_vlan: left promiscuous mode [ 436.993679][ T45] veth0_vlan: left promiscuous mode [ 437.441777][ T5202] Bluetooth: hci6: Opcode 0x2046 failed: -110 [ 438.256950][ T45] team0 (unregistering): Port device team_slave_1 removed [ 438.365897][ T45] team0 (unregistering): Port device team_slave_0 removed [ 438.474847][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.605023][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.664613][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.047759][ T5202] Bluetooth: hci2: command tx timeout [ 439.329774][T14723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.346493][T14723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.355980][T14723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.363436][T14723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.476317][T14723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.503703][T14723] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.515141][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.517785][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.534692][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.537600][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.774810][T14723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.827512][T14723] veth0_vlan: entered promiscuous mode [ 439.841045][T14723] veth1_vlan: entered promiscuous mode [ 439.866634][T14723] veth0_macvtap: entered promiscuous mode [ 439.871505][T14723] veth1_macvtap: entered promiscuous mode [ 439.884179][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.887798][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.891254][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.895224][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.899165][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.902642][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.906656][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.910459][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.914184][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.917565][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 439.920470][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.925870][T14723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.935280][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.939974][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.943447][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.947015][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.951029][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.954538][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.958606][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.962366][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.965951][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.969832][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.974454][T14723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.982799][T14723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.986307][T14723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.989530][T14723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.992358][T14723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.072430][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.075191][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.084862][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.087113][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.100155][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 440.104492][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 440.108989][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.111557][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.113252][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 440.123420][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 440.128545][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 440.133650][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 440.136107][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 440.140556][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 440.146318][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 440.152970][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 440.156062][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 440.160960][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 440.164563][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 440.173198][ T10] usb 6-1: string descriptor 0 read error: -22 [ 440.175873][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 440.180681][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.206221][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 440.269189][ T39] audit: type=1804 audit(1719639387.357:215): pid=14967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2995" name="/syzkaller.QD6hoq/181/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="sda1" ino=1979 res=1 errno=0 [ 440.456776][T14971] can: request_module (can-proto-0) failed. [ 440.463440][ T5202] Bluetooth: hci2: unexpected event 0x07 length: 283 > 255 [ 440.900679][T14978] can: request_module (can-proto-0) failed. [ 441.122006][ T5202] Bluetooth: hci2: command tx timeout [ 441.137516][ C1] ================================================================== [ 441.140514][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0x186/0x1a0 [ 441.143157][ C1] Read of size 8 at addr ffffc90007a87b90 by task syz-executor/13925 [ 441.148341][ C1] [ 441.149408][ C1] CPU: 1 PID: 13925 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 441.153785][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.158344][ C1] Call Trace: [ 441.159856][ C1] [ 441.161095][ C1] dump_stack_lvl+0x116/0x1f0 [ 441.163135][ C1] print_report+0xc3/0x620 [ 441.165075][ C1] ? __virt_addr_valid+0x5e/0x580 [ 441.167277][ C1] kasan_report+0xd9/0x110 [ 441.169198][ C1] ? profile_pc+0x186/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 441.171117][ C1] ? profile_pc+0x186/0x1a0 [ 441.173194][ C1] ? queued_read_lock_slowpath+0x131/0x2b1 [ 441.175740][ C1] profile_pc+0x186/0x1a0 [ 441.177523][ C1] profile_tick+0xd3/0x140 [ 441.179411][ C1] tick_nohz_handler+0x380/0x530 [ 441.181559][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 441.183824][ C1] __hrtimer_run_queues+0x657/0xcc0 [ 441.186092][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 441.188573][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 441.191166][ C1] hrtimer_interrupt+0x31b/0x800 [ 441.193273][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 441.195839][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 441.198374][ C1] [ 441.199683][ C1] [ 441.200973][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.203594][ C1] RIP: 0010:queued_read_lock_slowpath+0x131/0x2b1 [ 441.206372][ C1] Code: 85 45 01 00 00 8b 03 84 c0 74 36 48 b8 00 00 00 00 00 fc ff df 49 89 de 48 89 dd 49 c1 ee 03 83 e5 07 49 01 c6 83 c5 03 f3 90 <41> 0f b6 06 40 38 c5 7c 08 84 c0 0f 85 1f 01 00 00 8b 03 84 c0 75 [ 441.214635][ C1] RSP: 0018:ffffc90007a87b88 EFLAGS: 00000286 [ 441.217269][ C1] RAX: 00000000000002ff RBX: ffffffff8d80a080 RCX: ffffffff8adfd02b [ 441.220694][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d80a080 [ 441.224468][ C1] RBP: 0000000000000003 R08: 0000000000000001 R09: fffffbfff1b01410 [ 441.227868][ C1] R10: ffffffff8d80a083 R11: 0000000000000000 R12: 1ffff92000f50f72 [ 441.231197][ C1] R13: ffffffff8d80a084 R14: fffffbfff1b01410 R15: ffffffff8152a979 [ 441.234491][ C1] ? do_wait+0x1e9/0x570 [ 441.236304][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 441.238752][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 441.241169][ C1] ? __pfx_queued_read_lock_slowpath+0x10/0x10 [ 441.243775][ C1] __do_wait+0x105/0x890 [ 441.245596][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 441.248064][ C1] ? do_wait+0x1e9/0x570 [ 441.249910][ C1] do_wait+0x219/0x570 [ 441.251678][ C1] kernel_wait4+0x16c/0x280 [ 441.253621][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 441.255742][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 441.258120][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 441.260413][ C1] ? __might_fault+0xe3/0x190 [ 441.262418][ C1] __do_compat_sys_wait4+0x159/0x170 [ 441.264723][ C1] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 441.267307][ C1] ? __pfx_get_old_timespec32+0x10/0x10 [ 441.269698][ C1] __do_fast_syscall_32+0x73/0x120 [ 441.271928][ C1] do_fast_syscall_32+0x32/0x80 [ 441.274049][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.276843][ C1] RIP: 0023:0xf73d7579 [ 441.278570][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.286770][ C1] RSP: 002b:00000000ffe1cb20 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 441.290346][ C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffe1cc40 [ 441.293671][ C1] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.297035][ C1] RBP: 00000000ffe1cc40 R08: 0000000000000000 R09: 0000000000000000 [ 441.300372][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 441.303564][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.306977][ C1] [ 441.308377][ C1] [ 441.309500][ C1] The buggy address belongs to stack of task syz-executor/13925 [ 441.312894][ C1] and is located at offset 0 in frame: [ 441.315266][ C1] queued_read_lock_slowpath+0x0/0x2b1 [ 441.317618][ C1] [ 441.318653][ C1] This frame has 1 object: [ 441.320520][ C1] [32, 36) 'val' [ 441.320531][ C1] [ 441.323005][ C1] The buggy address belongs to the virtual mapping at [ 441.323005][ C1] [ffffc90007a80000, ffffc90007a89000) created by: [ 441.323005][ C1] kernel_clone+0xfd/0x980 [ 441.330140][ C1] [ 441.331207][ C1] The buggy address belongs to the physical page: [ 441.333915][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x523 [ 441.337684][ C1] flags: 0x7ff00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 441.340896][ C1] raw: 007ff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 441.344646][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 441.348359][ C1] page dumped because: kasan: bad access detected [ 441.351115][ C1] page_owner tracks the page as allocated [ 441.353622][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 1087, tgid 1087 (kworker/u32:7), ts 407801357960, free_ts 407798107911 [ 441.361530][ C1] post_alloc_hook+0x2d1/0x350 [ 441.363591][ C1] get_page_from_freelist+0x1353/0x2e50 [ 441.365979][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 441.368276][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 441.370583][ C1] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 441.373061][ C1] copy_process+0x29f5/0x6f50 [ 441.375112][ C1] kernel_clone+0xfd/0x980 [ 441.377041][ C1] user_mode_thread+0xb4/0xf0 [ 441.379110][ C1] call_usermodehelper_exec_work+0x6b/0x170 [ 441.381614][ C1] process_one_work+0x958/0x1ad0 [ 441.383753][ C1] worker_thread+0x6c8/0xf30 [ 441.385753][ C1] kthread+0x2c1/0x3a0 [ 441.387210][ C1] ret_from_fork+0x45/0x80 [ 441.388727][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.390321][ C1] page last free pid 13834 tgid 13834 stack trace: [ 441.392447][ C1] free_unref_page+0x64a/0xe40 [ 441.394156][ C1] __folio_put+0x239/0x360 [ 441.396097][ C1] __free_zspage+0x70d/0xb50 [ 441.398097][ C1] free_zspage+0x2b1/0x6b0 [ 441.400054][ C1] zs_free+0x214/0x280 [ 441.401824][ C1] zswap_entry_free+0x325/0x520 [ 441.403927][ C1] zswap_load+0x489/0x6c0 [ 441.405779][ C1] swap_read_folio+0x258/0x1580 [ 441.407865][ C1] swap_cluster_readahead+0x65c/0x6f0 [ 441.410174][ C1] swapin_readahead+0x12e/0xe20 [ 441.412282][ C1] do_swap_page+0x4c9/0x3170 [ 441.414253][ C1] __handle_mm_fault+0x1469/0x52a0 [ 441.416400][ C1] handle_mm_fault+0x476/0xa00 [ 441.418395][ C1] do_user_addr_fault+0x426/0xe50 [ 441.420549][ C1] exc_page_fault+0x5c/0xc0 [ 441.422521][ C1] asm_exc_page_fault+0x26/0x30 [ 441.424750][ C1] [ 441.425779][ C1] Memory state around the buggy address: [ 441.428358][ C1] ffffc90007a87a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.431890][ C1] ffffc90007a87b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.435421][ C1] >ffffc90007a87b80: 00 00 f1 f1 f1 f1 04 f3 f3 f3 00 00 00 00 00 00 [ 441.438812][ C1] ^ [ 441.440787][ C1] ffffc90007a87c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 441.444192][ C1] ffffc90007a87c80: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 [ 441.447586][ C1] ================================================================== [ 441.451252][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 441.454486][ C1] CPU: 1 PID: 13925 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 441.458829][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.462797][ C1] Call Trace: [ 441.464124][ C1] [ 441.465354][ C1] dump_stack_lvl+0x3d/0x1f0 [ 441.467340][ C1] panic+0x6f5/0x7a0 [ 441.468995][ C1] ? __pfx_panic+0x10/0x10 [ 441.470930][ C1] ? rcu_is_watching+0x12/0xc0 [ 441.473016][ C1] ? __pfx_lock_release+0x10/0x10 [ 441.475280][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 441.477435][ C1] check_panic_on_warn+0xab/0xb0 [ 441.479573][ C1] end_report+0x117/0x180 [ 441.481436][ C1] kasan_report+0xe9/0x110 [ 441.483420][ C1] ? profile_pc+0x186/0x1a0 [ 441.485422][ C1] ? profile_pc+0x186/0x1a0 [ 441.487429][ C1] ? queued_read_lock_slowpath+0x131/0x2b1 [ 441.489940][ C1] profile_pc+0x186/0x1a0 [ 441.491815][ C1] profile_tick+0xd3/0x140 [ 441.493729][ C1] tick_nohz_handler+0x380/0x530 [ 441.495865][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 441.498154][ C1] __hrtimer_run_queues+0x657/0xcc0 [ 441.500394][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 441.502885][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 441.505424][ C1] hrtimer_interrupt+0x31b/0x800 [ 441.507624][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 441.510186][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 441.512534][ C1] [ 441.513808][ C1] [ 441.515080][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.517662][ C1] RIP: 0010:queued_read_lock_slowpath+0x131/0x2b1 [ 441.520339][ C1] Code: 85 45 01 00 00 8b 03 84 c0 74 36 48 b8 00 00 00 00 00 fc ff df 49 89 de 48 89 dd 49 c1 ee 03 83 e5 07 49 01 c6 83 c5 03 f3 90 <41> 0f b6 06 40 38 c5 7c 08 84 c0 0f 85 1f 01 00 00 8b 03 84 c0 75 [ 441.528212][ C1] RSP: 0018:ffffc90007a87b88 EFLAGS: 00000286 [ 441.530803][ C1] RAX: 00000000000002ff RBX: ffffffff8d80a080 RCX: ffffffff8adfd02b [ 441.534188][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8d80a080 [ 441.537585][ C1] RBP: 0000000000000003 R08: 0000000000000001 R09: fffffbfff1b01410 [ 441.541015][ C1] R10: ffffffff8d80a083 R11: 0000000000000000 R12: 1ffff92000f50f72 [ 441.544394][ C1] R13: ffffffff8d80a084 R14: fffffbfff1b01410 R15: ffffffff8152a979 [ 441.547677][ C1] ? do_wait+0x1e9/0x570 [ 441.549522][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 441.551989][ C1] ? queued_read_lock_slowpath+0xdb/0x2b1 [ 441.554407][ C1] ? __pfx_queued_read_lock_slowpath+0x10/0x10 [ 441.557049][ C1] __do_wait+0x105/0x890 [ 441.558838][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 441.561366][ C1] ? do_wait+0x1e9/0x570 [ 441.563227][ C1] do_wait+0x219/0x570 [ 441.564985][ C1] kernel_wait4+0x16c/0x280 [ 441.566939][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 441.569082][ C1] ? __pfx_child_wait_callback+0x10/0x10 [ 441.571488][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 441.573799][ C1] ? __might_fault+0xe3/0x190 [ 441.575858][ C1] __do_compat_sys_wait4+0x159/0x170 [ 441.578080][ C1] ? __pfx___do_compat_sys_wait4+0x10/0x10 [ 441.580566][ C1] ? __pfx_get_old_timespec32+0x10/0x10 [ 441.582940][ C1] __do_fast_syscall_32+0x73/0x120 [ 441.585146][ C1] do_fast_syscall_32+0x32/0x80 [ 441.587251][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.589924][ C1] RIP: 0023:0xf73d7579 [ 441.591643][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 441.599795][ C1] RSP: 002b:00000000ffe1cb20 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 441.603353][ C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000ffe1cc40 [ 441.606730][ C1] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.610140][ C1] RBP: 00000000ffe1cc40 R08: 0000000000000000 R09: 0000000000000000 [ 441.613540][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 441.616929][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.620236][ C1] [ 442.708488][ C1] Shutting down cpus with NMI [ 442.711133][ C1] Kernel Offset: disabled [ 442.712917][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:36:28 Registers: info registers vcpu 0 CPU#0 RAX=ffff8880250ad360 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000021 RSI=0000000000000021 RDI=ffff8880250ad380 RBP=0000000000000000 RSP=ffffc900039df998 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000005 R11=0000000000000000 R12=ffffffff8dbb5160 R13=0000000000000000 R14=0000000000000028 R15=0000000000000000 RIP=ffffffff816c7060 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f511879c CR3=0000000052298000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f94935 RDI=ffffffff94d5c040 RBP=ffffffff94d5c000 RSP=ffffc90000598868 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6137303030396552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84f948d0 R15=0000000000000000 RIP=ffffffff84f9495f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d7fdff8 CR3=0000000052d26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff8195d0c6 RDX=fffffbfff1fc54bb RSI=ffffffff8b8fb860 RDI=ffffffff8b8fb8a0 RBP=ffff8880176e6000 RSP=ffffc900031c7700 R8 =0000000000000000 R9 =fffffbfff1fc54ba R10=ffffffff8fe2a5d7 R11=0000000000000001 R12=000000000003d90c R13=ffffea000190f040 R14=ffff8880176e6054 R15=ffff88802697c000 RIP=ffffffff8adc14ef RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f698f6aad00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005640ad2c2000 CR3=0000000000134000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4433216b4433216b 4433216b4433216b 4433216b4433216b 4433216b4433216b 4433216b4433216b 4433216b4433216b 4433216b4433216b 4433216b4433216b ZMM22=7ab6c8547ab6c854 7ab6c8547ab6c854 7ab6c8547ab6c854 7ab6c8547ab6c854 7ab6c8547ab6c854 7ab6c8547ab6c854 7ab6c8547ab6c854 7ab6c8547ab6c854 ZMM23=c093f0d7c093f0d7 c093f0d7c093f0d7 c093f0d7c093f0d7 c093f0d7c093f0d7 c093f0d7c093f0d7 c093f0d7c093f0d7 c093f0d7c093f0d7 c093f0d7c093f0d7 ZMM24=c98702fbc98702fb c98702fbc98702fb c98702fbc98702fb c98702fbc98702fb c98702fbc98702fb c98702fbc98702fb c98702fbc98702fb c98702fbc98702fb ZMM25=53ae41a753ae41a7 53ae41a753ae41a7 53ae41a753ae41a7 53ae41a753ae41a7 53ae41a753ae41a7 53ae41a753ae41a7 53ae41a753ae41a7 53ae41a753ae41a7 ZMM26=bd8656bdbd8656bd bd8656bdbd8656bd bd8656bdbd8656bd bd8656bdbd8656bd bd8656bdbd8656bd bd8656bdbd8656bd bd8656bdbd8656bd bd8656bdbd8656bd ZMM27=2c80f7b12c80f7b1 2c80f7b12c80f7b1 2c80f7b12c80f7b1 2c80f7b12c80f7b1 2c80f7b12c80f7b1 2c80f7b12c80f7b1 2c80f7b12c80f7b1 2c80f7b12c80f7b1 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a8110000a8110000 a8110000a8110000 a8110000a8110000 a8110000a8110000 a8110000a8110000 a8110000a8110000 a8110000a8110000 a8110000a8110000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90000f2f670 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8dbb5160 RBP=ffffffff8dbb5160 RSP=ffffc90000f2f590 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000002 R12=ffff88801b360000 R13=00000000ffffffff R14=00000000ffffffff R15=ffff8880289be000 RIP=ffffffff8adbfee7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057ecb4c0 CR3=00000000211ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000