last executing test programs: 41.605527814s ago: executing program 3 (id=73): eventfd2(0xffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/69, 0x45, 0x9) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x200022f, &(0x7f0000000400)={0x0, 0x46ea, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ',~%\''}, 0x0, 0x2, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fc0004"], 0x48}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) syz_clone3(&(0x7f0000000300)={0xc1004080, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/132, 0x84, &(0x7f0000000280)=""/56, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sched_setscheduler(r9, 0x0, &(0x7f0000000380)=0xdce) 33.945026755s ago: executing program 3 (id=73): eventfd2(0xffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/69, 0x45, 0x9) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x200022f, &(0x7f0000000400)={0x0, 0x46ea, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ',~%\''}, 0x0, 0x2, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fc0004"], 0x48}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) syz_clone3(&(0x7f0000000300)={0xc1004080, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/132, 0x84, &(0x7f0000000280)=""/56, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sched_setscheduler(r9, 0x0, &(0x7f0000000380)=0xdce) 8.070535106s ago: executing program 3 (id=73): eventfd2(0xffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/69, 0x45, 0x9) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x200022f, &(0x7f0000000400)={0x0, 0x46ea, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ',~%\''}, 0x0, 0x2, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fc0004"], 0x48}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) syz_clone3(&(0x7f0000000300)={0xc1004080, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/132, 0x84, &(0x7f0000000280)=""/56, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sched_setscheduler(r9, 0x0, &(0x7f0000000380)=0xdce) 8.070459362s ago: executing program 3 (id=73): eventfd2(0xffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/69, 0x45, 0x9) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x200022f, &(0x7f0000000400)={0x0, 0x46ea, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ',~%\''}, 0x0, 0x2, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fc0004"], 0x48}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) syz_clone3(&(0x7f0000000300)={0xc1004080, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/132, 0x84, &(0x7f0000000280)=""/56, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sched_setscheduler(r9, 0x0, &(0x7f0000000380)=0xdce) 8.070381461s ago: executing program 3 (id=73): eventfd2(0xffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/69, 0x45, 0x9) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x200022f, &(0x7f0000000400)={0x0, 0x46ea, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ',~%\''}, 0x0, 0x2, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fc0004"], 0x48}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) syz_clone3(&(0x7f0000000300)={0xc1004080, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/132, 0x84, &(0x7f0000000280)=""/56, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sched_setscheduler(r9, 0x0, &(0x7f0000000380)=0xdce) 6.484573017s ago: executing program 3 (id=73): eventfd2(0xffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/69, 0x45, 0x9) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) r1 = syz_io_uring_setup(0x200022f, &(0x7f0000000400)={0x0, 0x46ea, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ',~%\''}, 0x0, 0x2, {0x0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fc0004"], 0x48}}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) syz_clone3(&(0x7f0000000300)={0xc1004080, &(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/132, 0x84, &(0x7f0000000280)=""/56, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sched_setscheduler(r9, 0x0, &(0x7f0000000380)=0xdce) 5.121241785s ago: executing program 0 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x60342, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x4, 0x9, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffc}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x4, 0x9, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) (async) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000000000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f200009801c0002800c00018008000140000000050c0001800800014000000008"], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d04000000000ebbbd6e0000000000000000", @ANYRES32=0x0, @ANYBLOB="4f070000000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d04000000000ebbbd6e0000000000000000", @ANYRES32=0x0, @ANYBLOB="4f070000000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}}, 0xc000) 5.006232649s ago: executing program 1 (id=253): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34424752, 0x0, 0xa, [{0x6}, {0x4}, {}, {}, {0x8}, {}, {0x0, 0x3}, {0x4, 0xfffffffe}], 0x9, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/46, 0x2e}], 0x1}, 0x5}], 0x2, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) syz_io_uring_setup(0x237, 0x0, 0x0, &(0x7f00000001c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r6 = syz_open_dev$admmidi(&(0x7f0000000100), 0x20, 0xa200) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x0) poll(&(0x7f0000000300)=[{r7}], 0x1, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r8, 0x5100) 4.16813973s ago: executing program 0 (id=255): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 3.831423265s ago: executing program 0 (id=256): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) creat(&(0x7f00000001c0)='./file0\x00', 0xa8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x20064084) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x2], 0x0, 0x0}) syz_clone3(&(0x7f0000001100)={0x40200, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) creat(&(0x7f00000001c0)='./file0\x00', 0xa8) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x20064084) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x2], 0x0, 0x0}) (async) syz_clone3(&(0x7f0000001100)={0x40200, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) 3.697352106s ago: executing program 0 (id=258): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="18363e440f237c0f38f01e430f072e0ffe1fd9ed8f6d18edfe3866ba2000b8b3000000efc4a15c554c39ad66420f50c0420f07", 0x33}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4"], 0xfc}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4020aeb2, &(0x7f0000000140)={0x1}) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) fcntl$setown(r6, 0x8, 0x0) 2.69488237s ago: executing program 0 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301180, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0xe}, {&(0x7f0000000640)="d8f5aa1f89000000", 0x8}, {&(0x7f0000000680)="e1cfafff3df3f04538f45b2b", 0xc}], 0x3) 2.317806383s ago: executing program 2 (id=262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) sendto$inet6(r0, &(0x7f0000000300)="c407f210bb60d4bb9bde97aad276811ad20f9d8233ec34bf17feea08661bff2b1b6f3381237d2ee3555264ba0bb3ee0cf5164a6c4cd1f6a4e4b02286ae585fc5d5b1301ad8f686dc80aec394d2bdb95712", 0x51, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x28140) 2.227601728s ago: executing program 2 (id=263): r0 = syz_io_uring_complete(0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200098c0}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={r1, 0x9, 0xffffffffffffffff, 0x1}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000a40)={0xc7, 0x0, 0x1}) ppoll(&(0x7f0000000ac0)=[{r0, 0x4100}, {r0, 0x200}, {r0, 0x401}, {r0, 0x7081}, {0xffffffffffffffff, 0x104}], 0x5, &(0x7f0000000b00)={0x0, 0x989680}, &(0x7f0000000b40)={[0x6, 0x8]}, 0x8) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000cc0)={0x0, 0x6, 0xfffffff6, 0x8, 0xd4e8, 0x5, 0xb, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18a20553}}, 0x3, 0xffffffff, 0x44, 0x7, 0x5}}, &(0x7f0000000d80)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000dc0)={r6, 0x5, 0x3, 0x800}, &(0x7f0000000e00)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) connect$inet6(r0, &(0x7f0000000ec0)={0xa, 0x4e24, 0x7f2, @loopback, 0x85}, 0x1c) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x140a, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv6_newaddrlabel={0x3c, 0x48, 0x2, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x80) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000011c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000001340)={&(0x7f0000001140), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x80, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x400c090) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffff9c, &(0x7f0000001380), 0x111000, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000014c0)={0x7, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, [{0x8, 0x4, 0x2, '\x00', 0x1182}, {0x3, 0xba, 0x7, '\x00', 0x4}, {0x8, 0x2, 0x8ba, '\x00', 0x1004}, {0x515, 0x7, 0x3, '\x00', 0x8}, {0x8, 0x7, 0x3}]}) 2.077780562s ago: executing program 2 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r1, 0x0, 0xfffffffe, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00', 0x400}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x0, @hci={0x1f, 0x3, 0x1}, @ax25={0x3, @default, 0x1}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x5, 0x9}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES16, @ANYBLOB="00000000000000002c0012800851dfd9d774700020000280050005000100000014000800fe8000000000000000000000000000bb"], 0x4c}}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='qgroup_meta_convert\x00', r6}, 0x18) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0810450000300000000000019078ac1e0001ac1414aa0c0090781200183f2500000000000000000100007f0000017f000001"], 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x730a, 0x10100, 0x3, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x5) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x20000002, r12) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x37, 0x0, @fd_index, 0x9, 0x0, 0x1, 0x2, 0x1, {0x0, r12}}) io_uring_enter(r9, 0x2def, 0x4000, 0x0, 0x0, 0x0) 1.896519466s ago: executing program 1 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000680)={0x0}) ppoll(&(0x7f00000000c0)=[{r4, 0x21}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000300)={r5}) r6 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r6, 0x47f6, 0xb277, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x60, "9eecb25ca16e4b79bb56da7d76fcbcf010fb0a37b2cdd2051042ba420a1f3e4844c589a750808b6b09c5c8aeb60fb392ff62911b6b97b14d3f994c80b19de3af0257caa993088734e7224118b9f8f790e935bb9ac7a6151fdd18f72003847f2d"}, &(0x7f0000000000)=0x68) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000280)={r10, @in6={{0xa, 0x4e22, 0x3, @private0, 0x1e000000}}}, &(0x7f0000000100)=0x84) msgsnd(0x0, &(0x7f0000000480)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioperm(0x0, 0x87, 0x3ff) landlock_restrict_self(0xffffffffffffffff, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) r11 = dup(0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000000380)={r10, 0x22, "6919c3cb12d142cea84ddc0ff7c16de4f8440e3e3109d25c1a0ab5abb4949686cddc"}, &(0x7f0000000400)=0x2a) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000006480)={0x60, r2, 0x405, 0x4070bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.762878949s ago: executing program 2 (id=266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 1.026279613s ago: executing program 1 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x600) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x98, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x1}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x2, 0x10, 0x3, 0xfffffffc, 0x0, r5}, &(0x7f00000001c0), &(0x7f0000000280)) syz_open_dev$tty20(0xc, 0x4, 0x0) unshare(0x62040200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000010140)={0x2020}, 0x2036) 492.103248ms ago: executing program 0 (id=268): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@map, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x1cd5, &(0x7f0000000440)={0x0, 0x1, 0x40, 0x0, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1e, 0x20000002, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x2, 0x800, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1, 0xffffeffe, 0xfffffffe, 0x0, 0xd0b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xda89, 0x0, 0x0, 0xf7fffffd]}) r2 = fsopen(&(0x7f0000000100)='sysv\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='*--\xb6\\@\x00', &(0x7f0000000080)='exfat\x00', 0x0) close(r2) openat$drirender128(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0xfffffffffffffe78, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xd4600000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r8 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r8, 0x0, 0x0) 163.202854ms ago: executing program 2 (id=269): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0, 0x2}, 0x20) mount(0x0, 0x0, &(0x7f0000000080)='devpts\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2014c8, 0x0, 0x95e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffe76}, 0x0) 162.959012ms ago: executing program 1 (id=270): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) 25.121558ms ago: executing program 1 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000500"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x36, 0x32, 0x37]}}}}], [{@smackfsdef={'smackfsdef', 0x3d, 'bind'}}]}) r2 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 19.442739ms ago: executing program 2 (id=272): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$nl_generic(0x11, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc120d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000340)="439e9c06fc666c9d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234bcf4125976da0c6281e030854ed3d5d0a79aab13418b34c110404c2b0583259373895f030ec7576f3e9d974026523c30eb2a64cafbff05783708d0c342ba69c5c2fd0bed88d663072ba518f6e8c7781522578e049082c87156beef58d29ff7b279c9231ad965c6e7f768adea624a772599ef5a693db57139a79d4c0600000000000000930b365e989d9cad8fc07fd37d095570d9670ba3cf01f53a166c6fafa9bbeb621334", 0xc7}], 0x2}}], 0x2, 0x4080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000040000000700c85bfece5c108297caf20b6844c208edc33e0bb62741176212", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="180300000000004fc343cbe7be02e889a10b9c31a300000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000001b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x80000000}}}, 0x84) 0s ago: executing program 1 (id=273): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8b041, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r6) r8 = socket$kcm(0xa, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r12) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffea6) kernel console output (not intermixed with test programs): he problem. [ 38.967973][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.971398][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.973303][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.981185][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.008989][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.011515][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.020869][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.028679][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.031227][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.040208][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.059889][ T5961] team0: Port device team_slave_0 added [ 39.062938][ T5961] team0: Port device team_slave_1 added [ 39.096990][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.098858][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.105520][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.110626][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.113187][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.122640][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.144515][ T5953] hsr_slave_0: entered promiscuous mode [ 39.147623][ T5953] hsr_slave_1: entered promiscuous mode [ 39.170657][ T5964] hsr_slave_0: entered promiscuous mode [ 39.173335][ T5964] hsr_slave_1: entered promiscuous mode [ 39.175905][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.178574][ T5964] Cannot create hsr debugfs directory [ 39.214452][ T5952] hsr_slave_0: entered promiscuous mode [ 39.218180][ T5952] hsr_slave_1: entered promiscuous mode [ 39.220719][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.223386][ T5952] Cannot create hsr debugfs directory [ 39.305371][ T5961] hsr_slave_0: entered promiscuous mode [ 39.308128][ T5961] hsr_slave_1: entered promiscuous mode [ 39.310057][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.312101][ T5961] Cannot create hsr debugfs directory [ 39.491225][ T5953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.495710][ T5953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.500906][ T5953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.504430][ T5953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.527071][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.530692][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.535866][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.539287][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.569254][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.573978][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.577497][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.580832][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.619596][ T5961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.623019][ T5961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.627348][ T5961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.630505][ T5961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.662829][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.677565][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.682742][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.693857][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.695938][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.702975][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.718122][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.720088][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.727004][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.730107][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.736188][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.738125][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.750884][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.752793][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.761777][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.763752][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.773167][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.775338][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.785306][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.820820][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.833465][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.835473][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.842942][ T5964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.854380][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.856970][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.896431][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.920987][ T5953] veth0_vlan: entered promiscuous mode [ 39.928087][ T5953] veth1_vlan: entered promiscuous mode [ 39.943838][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.957562][ T5953] veth0_macvtap: entered promiscuous mode [ 39.964674][ T5953] veth1_macvtap: entered promiscuous mode [ 39.970659][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.980340][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.003671][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.007668][ T5964] veth0_vlan: entered promiscuous mode [ 40.015701][ T5964] veth1_vlan: entered promiscuous mode [ 40.019857][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.032945][ T5953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.036459][ T5953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.039505][ T5953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.042255][ T5953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.053704][ T5961] veth0_vlan: entered promiscuous mode [ 40.076210][ T5961] veth1_vlan: entered promiscuous mode [ 40.081931][ T5964] veth0_macvtap: entered promiscuous mode [ 40.094846][ T5952] veth0_vlan: entered promiscuous mode [ 40.097302][ T5964] veth1_macvtap: entered promiscuous mode [ 40.114234][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.116676][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.122778][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.126513][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.129903][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.136510][ T5952] veth1_vlan: entered promiscuous mode [ 40.149581][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.152446][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.155897][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.161345][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.162117][ T5964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.163907][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.165124][ T5959] Bluetooth: hci1: command tx timeout [ 40.166199][ T64] Bluetooth: hci3: command tx timeout [ 40.166424][ T64] Bluetooth: hci2: command tx timeout [ 40.167016][ T5966] Bluetooth: hci0: command tx timeout [ 40.169539][ T5964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.179965][ T5964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.182989][ T5964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.189966][ T5961] veth0_macvtap: entered promiscuous mode [ 40.194978][ T5961] veth1_macvtap: entered promiscuous mode [ 40.212045][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.214953][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.217504][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.220266][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.224230][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.233021][ T5953] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.252945][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.257424][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.260140][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.262912][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.267006][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.270435][ T5952] veth0_macvtap: entered promiscuous mode [ 40.277425][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.279799][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.284136][ T5952] veth1_macvtap: entered promiscuous mode [ 40.292842][ T5961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.295822][ T5961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.298729][ T5961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.301631][ T5961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.324200][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.326432][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.355555][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.358329][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.361436][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.364241][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.368372][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.372186][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.377959][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.381455][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.384298][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.387449][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.390268][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.392750][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.395549][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.400166][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.418489][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.421481][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.424443][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.430618][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.466385][ T6022] binder: 6021:6022 ioctl c0306201 20000680 returned -22 [ 40.469509][ T6022] binder: 6021:6022 ioctl 89f1 20000140 returned -22 [ 40.474000][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.477684][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.516117][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.519620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.548727][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.553378][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.574594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.575576][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.576999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.581919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.585264][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.614026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.775669][ T6032] Bluetooth: MGMT ver 1.23 [ 40.841951][ T6034] Trying to write to read-only block-device nullb0 [ 41.600281][ T6041] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 41.657881][ T6044] ucma_write: process 7 (syz.3.7) changed security contexts after opening file descriptor, this is not allowed. [ 41.794627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.846501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.907961][ T6051] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 41.941666][ T6051] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 41.944687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.005076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.254834][ T5966] Bluetooth: hci0: command tx timeout [ 42.256308][ T5966] Bluetooth: hci2: command tx timeout [ 42.256845][ T5959] Bluetooth: hci1: command tx timeout [ 42.257906][ T5966] Bluetooth: hci3: command tx timeout [ 42.661961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 42.866880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.063454][ T6069] warning: `syz.3.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.254320][ T6075] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 43.296944][ T6077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.323035][ T6075] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 43.925895][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 43.930068][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 43.936256][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.981952][ T6112] netlink: 240 bytes leftover after parsing attributes in process `syz.3.24'. [ 43.987302][ T6112] NCSI netlink: No device for ifindex 0 [ 44.206603][ T6121] xt_CT: No such helper "pptp" [ 44.324668][ T5966] Bluetooth: hci3: command tx timeout [ 44.431914][ T5966] Bluetooth: hci1: command tx timeout [ 44.433638][ T5966] Bluetooth: hci2: command tx timeout [ 44.435154][ T5966] Bluetooth: hci0: command tx timeout [ 44.733519][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.762431][ T6136] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 44.765075][ T6136] openvswitch: netlink: Actions may not be safe on all matching packets [ 44.885188][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 44.889818][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.892465][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 44.895782][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 44.895797][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 44.895814][ T5843] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 44.895825][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.907390][ T5843] hub 5-1:1.0: bad descriptor, ignoring hub [ 44.907759][ T5843] hub 5-1:1.0: probe with driver hub failed with error -5 [ 44.907999][ T5843] cdc_wdm 5-1:1.0: skipping garbage [ 44.908006][ T5843] cdc_wdm 5-1:1.0: skipping garbage [ 44.927517][ T5843] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 44.927529][ T5843] cdc_wdm 5-1:1.0: Unknown control protocol [ 45.251408][ T6151] sp0: Synchronizing with TNC [ 45.274094][ T6152] overlayfs: missing 'lowerdir' [ 45.274569][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 45.424893][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 45.438260][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 45.441740][ T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 45.447493][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 45.450117][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 45.452911][ T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.461327][ T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 45.464327][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.595421][ T5995] usb 5-1: USB disconnect, device number 2 [ 46.154268][ T1332] IPVS: starting estimator thread 0... [ 46.274525][ T6171] IPVS: using max 39 ests per chain, 93600 per kthread [ 46.405601][ T64] Bluetooth: hci3: command tx timeout [ 46.488772][ T64] Bluetooth: hci0: command tx timeout [ 46.488869][ T5959] Bluetooth: hci2: command tx timeout [ 46.491819][ T5959] Bluetooth: hci1: command tx timeout [ 46.573075][ T6173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.211063][ T6180] block nbd1: NBD_DISCONNECT [ 47.286581][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 47.444661][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 47.444770][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 47.864764][ T8] usb 8-1: usb_control_msg returned -71 [ 47.866799][ T8] usbtmc 8-1:16.0: can't read capabilities [ 47.884864][ T8] usb 8-1: USB disconnect, device number 2 [ 48.333002][ T6219] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 48.337634][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 48.342108][ T6219] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 48.344222][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 48.574608][ T64] Bluetooth: hci1: command tx timeout [ 48.783467][ T6236] ======================================================= [ 48.783467][ T6236] WARNING: The mand mount option has been deprecated and [ 48.783467][ T6236] and is ignored by this kernel. Remove the mand [ 48.783467][ T6236] option from the mount to silence this warning. [ 48.783467][ T6236] ======================================================= [ 48.783774][ T6235] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 48.794098][ T6236] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 48.795349][ T6235] overlayfs: missing 'lowerdir' [ 48.797595][ T6236] overlayfs: missing 'lowerdir' [ 49.508992][ T6260] block nbd0: NBD_DISCONNECT [ 49.512119][ T6260] block nbd0: Disconnected due to user request. [ 49.515085][ T6260] block nbd0: shutting down sockets [ 49.700361][ T6274] netlink: 'syz.1.65': attribute type 12 has an invalid length. [ 49.884582][ T40] audit: type=1326 audit(1732204178.574:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.890844][ T40] audit: type=1326 audit(1732204178.584:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.907537][ T40] audit: type=1326 audit(1732204178.584:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.913191][ T40] audit: type=1326 audit(1732204178.584:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.935427][ T40] audit: type=1326 audit(1732204178.594:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.941508][ T40] audit: type=1326 audit(1732204178.604:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.947918][ T40] audit: type=1326 audit(1732204178.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 49.953577][ T40] audit: type=1326 audit(1732204178.624:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 50.563826][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.588647][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.640190][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.648173][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.651405][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.652871][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.654128][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.659564][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.661756][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.716946][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.764433][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.788142][ T6296] chnl_net:caif_netlink_parms(): no params data found [ 50.838649][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.842100][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.844025][ T6296] bridge_slave_0: entered allmulticast mode [ 50.846167][ T6296] bridge_slave_0: entered promiscuous mode [ 50.848827][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.850652][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.852477][ T6296] bridge_slave_1: entered allmulticast mode [ 50.854777][ T6296] bridge_slave_1: entered promiscuous mode [ 50.875521][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.895561][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.962860][ T6296] team0: Port device team_slave_0 added [ 50.966061][ T68] bridge_slave_1: left allmulticast mode [ 50.968600][ T68] bridge_slave_1: left promiscuous mode [ 50.971906][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.996695][ T68] bridge_slave_0: left allmulticast mode [ 50.998323][ T68] bridge_slave_0: left promiscuous mode [ 51.001094][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.279273][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.284252][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.288402][ T68] bond0 (unregistering): Released all slaves [ 51.293898][ T6296] team0: Port device team_slave_1 added [ 51.296439][ T6316] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 51.298462][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 51.300919][ T6316] team0: entered promiscuous mode [ 51.302266][ T6316] team_slave_0: entered promiscuous mode [ 51.303887][ T6316] team_slave_1: entered promiscuous mode [ 51.305047][ T6312] lo speed is unknown, defaulting to 1000 [ 51.307710][ T6316] team0: entered allmulticast mode [ 51.309662][ T6316] team_slave_0: entered allmulticast mode [ 51.314241][ T6316] team_slave_1: entered allmulticast mode [ 51.322995][ T6316] bridge0: port 3(team0) entered blocking state [ 51.325910][ T6316] bridge0: port 3(team0) entered disabled state [ 51.358841][ T6316] bridge0: port 3(team0) entered blocking state [ 51.361004][ T6316] bridge0: port 3(team0) entered forwarding state [ 51.393200][ T6312] lo speed is unknown, defaulting to 1000 [ 51.412849][ T6312] lo speed is unknown, defaulting to 1000 [ 51.415983][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.426269][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.433212][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.438449][ T6312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.446541][ T6312] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.503003][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.505934][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.513509][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.518582][ T6312] lo speed is unknown, defaulting to 1000 [ 51.521712][ T6312] lo speed is unknown, defaulting to 1000 [ 51.567998][ T6312] lo speed is unknown, defaulting to 1000 [ 51.572776][ T6296] hsr_slave_0: entered promiscuous mode [ 51.583065][ T6296] hsr_slave_1: entered promiscuous mode [ 51.586450][ T6296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.589191][ T6296] Cannot create hsr debugfs directory [ 51.591266][ T6312] lo speed is unknown, defaulting to 1000 [ 51.594074][ T6312] lo speed is unknown, defaulting to 1000 [ 51.731360][ T6333] can: request_module (can-proto-5) failed. [ 51.838291][ T68] hsr_slave_0: left promiscuous mode [ 51.848202][ T68] hsr_slave_1: left promiscuous mode [ 51.851121][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.853405][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.858906][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.860908][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.886543][ T68] veth1_macvtap: left promiscuous mode [ 51.889828][ T68] veth0_macvtap: left promiscuous mode [ 51.891457][ T68] veth1_vlan: left promiscuous mode [ 51.893384][ T68] veth0_vlan: left promiscuous mode [ 52.324982][ T5999] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.504780][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 52.510773][ T5999] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 52.513698][ T5999] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 52.518550][ T5999] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 52.522832][ T5999] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 52.525480][ T5999] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 52.528979][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.536820][ T5999] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 52.539381][ T5999] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 52.542296][ T5999] usb 5-1: Product: syz [ 52.543859][ T5999] usb 5-1: Manufacturer: syz [ 52.545761][ T5999] usb 5-1: SerialNumber: syz [ 52.549376][ T5999] usb 5-1: config 0 descriptor?? [ 52.557003][ T5999] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 52.561963][ T5999] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 52.657349][ T68] team0 (unregistering): Port device team_slave_1 removed [ 52.722974][ T68] team0 (unregistering): Port device team_slave_0 removed [ 52.724587][ T5966] Bluetooth: hci1: command tx timeout [ 52.760958][ T6351] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 52.914688][ T1332] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.064588][ T1332] usb 7-1: device descriptor read/64, error -71 [ 53.324598][ T1332] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.477410][ T1332] usb 7-1: device descriptor read/64, error -71 [ 53.577023][ T6390] lo speed is unknown, defaulting to 1000 [ 53.595806][ T1332] usb usb7-port1: attempt power cycle [ 53.627317][ T6296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.634088][ T6296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.640127][ T6296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.643386][ T6296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.677363][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.685609][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.691405][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.693294][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.696135][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.698002][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.699025][ T6400] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 53.701769][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.705233][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 53.712560][ T6401] vhci_hcd: connection closed [ 53.714107][ T1131] vhci_hcd: stop threads [ 53.719969][ T1131] vhci_hcd: release socket [ 53.724534][ T1131] vhci_hcd: disconnect device [ 53.794748][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.812803][ T6296] veth0_vlan: entered promiscuous mode [ 53.817484][ T6296] veth1_vlan: entered promiscuous mode [ 53.829685][ T6296] veth0_macvtap: entered promiscuous mode [ 53.834162][ T6296] veth1_macvtap: entered promiscuous mode [ 53.841517][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.844413][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.847544][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.850714][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.853266][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.856991][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.860433][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.864762][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.867626][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.870610][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.873311][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.876754][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.879458][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.882772][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.887322][ T6296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.889959][ T6296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.892597][ T6296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.895441][ T6296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.919549][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.921689][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.929571][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.932229][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.934947][ T1332] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.956804][ T1332] usb 7-1: device descriptor read/8, error -71 [ 54.196236][ T1332] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 54.215029][ T1332] usb 7-1: device descriptor read/8, error -71 [ 54.300390][ T6415] misc userio: No port type given on /dev/userio [ 54.325984][ T1332] usb usb7-port1: unable to enumerate USB device [ 54.792033][ T30] usb 5-1: USB disconnect, device number 3 [ 54.819098][ T30] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 55.100485][ T40] audit: type=1326 audit(1732204183.794:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.113281][ T40] audit: type=1326 audit(1732204183.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.126271][ T40] audit: type=1326 audit(1732204183.804:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.134668][ T40] audit: type=1326 audit(1732204183.804:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.140304][ T40] audit: type=1326 audit(1732204183.804:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.146110][ T40] audit: type=1326 audit(1732204183.804:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.152010][ T40] audit: type=1326 audit(1732204183.804:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.158025][ T40] audit: type=1326 audit(1732204183.804:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.164301][ T40] audit: type=1326 audit(1732204183.804:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.171727][ T40] audit: type=1326 audit(1732204183.804:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.1.96" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 55.296076][ T5966] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 55.298809][ T5966] Bluetooth: hci3: Injecting HCI hardware error event [ 55.301366][ T5966] Bluetooth: hci3: hardware error 0x00 [ 55.826882][ T6431] Zero length message leads to an empty skb [ 55.874839][ T6438] 9pnet_fd: Insufficient options for proto=fd [ 56.125598][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.310165][ T5968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.313377][ T5968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.319359][ T5968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.322303][ T5968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.325367][ T5968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.328405][ T5968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.352609][ T6448] lo speed is unknown, defaulting to 1000 [ 56.414897][ T6451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.104'. [ 56.442214][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 56.503436][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.505982][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.508070][ T6448] bridge_slave_0: entered allmulticast mode [ 56.510177][ T6448] bridge_slave_0: entered promiscuous mode [ 56.516054][ T6461] pim6reg: entered allmulticast mode [ 56.517991][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.522954][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.525407][ T6448] bridge_slave_1: entered allmulticast mode [ 56.527727][ T6448] bridge_slave_1: entered promiscuous mode [ 56.558052][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.561745][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.588862][ T6448] team0: Port device team_slave_0 added [ 56.591701][ T6448] team0: Port device team_slave_1 added [ 56.611226][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.613107][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.622129][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.630413][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.636327][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.644763][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.691123][ T6448] hsr_slave_0: entered promiscuous mode [ 56.693873][ T6448] hsr_slave_1: entered promiscuous mode [ 56.699073][ T6464] lo speed is unknown, defaulting to 1000 [ 56.774680][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.938071][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 56.941775][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.944864][ T5843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.947265][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 56.950841][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 56.953797][ T5843] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 56.957099][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.963467][ T6478] syz.0.109 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.967404][ T5843] hub 6-1:1.0: bad descriptor, ignoring hub [ 56.969037][ T5843] hub 6-1:1.0: probe with driver hub failed with error -5 [ 56.971147][ T5843] cdc_wdm 6-1:1.0: skipping garbage [ 56.972510][ T5843] cdc_wdm 6-1:1.0: skipping garbage [ 56.976378][ T5843] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 56.977952][ T5843] cdc_wdm 6-1:1.0: Unknown control protocol [ 57.365466][ T5966] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 57.927962][ T6491] bridge0: entered promiscuous mode [ 57.929982][ T6491] macvlan2: entered promiscuous mode [ 57.932507][ T6491] bridge0: port 4(macvlan2) entered blocking state [ 57.935280][ T6491] bridge0: port 4(macvlan2) entered disabled state [ 57.937561][ T6491] macvlan2: entered allmulticast mode [ 57.939398][ T6491] bridge0: entered allmulticast mode [ 57.941982][ T6491] macvlan2: left allmulticast mode [ 57.943704][ T6491] bridge0: left allmulticast mode [ 57.946911][ T6491] bridge0: left promiscuous mode [ 58.070360][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.146268][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.198519][ T6505] input: syz1 as /devices/virtual/input/input5 [ 58.226022][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.323060][ T12] bridge_slave_1: left allmulticast mode [ 58.325269][ T12] bridge_slave_1: left promiscuous mode [ 58.327484][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.332076][ T12] bridge_slave_0: left allmulticast mode [ 58.334036][ T12] bridge_slave_0: left promiscuous mode [ 58.339245][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.405334][ T5966] Bluetooth: hci1: command tx timeout [ 58.614635][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.620137][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.625531][ T12] bond0 (unregistering): Released all slaves [ 59.029584][ T12] hsr_slave_0: left promiscuous mode [ 59.032068][ T12] hsr_slave_1: left promiscuous mode [ 59.034023][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.036169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.038393][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.040424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.060282][ T12] veth1_macvtap: left promiscuous mode [ 59.061765][ T12] veth0_macvtap: left promiscuous mode [ 59.063246][ T12] veth1_vlan: left promiscuous mode [ 59.065237][ T12] veth0_vlan: left promiscuous mode [ 59.364919][ T5966] Bluetooth: hci0: command tx timeout [ 59.585264][ T6537] syz.0.121 (6537) used greatest stack depth: 20608 bytes left [ 59.600798][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.667804][ T12] team0 (unregistering): Port device team_slave_0 removed [ 60.088756][ T6533] lo speed is unknown, defaulting to 1000 [ 60.120941][ T6448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.124740][ T1332] usb 6-1: USB disconnect, device number 2 [ 60.126223][ T6448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.156816][ T6448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.160079][ T6448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.191661][ T6545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.223674][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.242685][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.252898][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.255564][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.259870][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.262460][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.305470][ T6549] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 60.308225][ T6549] overlayfs: failed to set xattr on upper [ 60.310364][ T6549] overlayfs: ...falling back to redirect_dir=nofollow. [ 60.312943][ T6549] overlayfs: ...falling back to index=off. [ 60.317099][ T6549] overlayfs: ...falling back to uuid=null. [ 60.365313][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.388987][ T6448] veth0_vlan: entered promiscuous mode [ 60.397829][ T6448] veth1_vlan: entered promiscuous mode [ 60.411312][ T6448] veth0_macvtap: entered promiscuous mode [ 60.414376][ T6448] veth1_macvtap: entered promiscuous mode [ 60.421206][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.424620][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.427407][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.430924][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.434170][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.438796][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.443027][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.462034][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.470015][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.473300][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.484326][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.487185][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.489859][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.493055][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.498343][ T5966] Bluetooth: hci1: command tx timeout [ 60.508068][ T6448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.510343][ T6448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.512578][ T6448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.515241][ T6448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.565042][ T6565] FAULT_INJECTION: forcing a failure. [ 60.565042][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.568439][ T6565] CPU: 3 UID: 0 PID: 6565 Comm: syz.1.130 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 60.571064][ T6565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.573848][ T6565] Call Trace: [ 60.574729][ T6565] [ 60.575506][ T6565] dump_stack_lvl+0x16c/0x1f0 [ 60.576731][ T6565] should_fail_ex+0x497/0x5b0 [ 60.577965][ T6565] _copy_from_user+0x2e/0xd0 [ 60.579062][ T6565] get_compat_msghdr+0xa8/0x170 [ 60.580326][ T6565] ? __pfx_get_compat_msghdr+0x10/0x10 [ 60.581757][ T6565] ___sys_sendmsg+0x1b0/0x1e0 [ 60.583003][ T6565] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.584367][ T6565] ? __pfx_lock_release+0x10/0x10 [ 60.585715][ T6565] ? trace_lock_acquire+0x14a/0x1d0 [ 60.587088][ T6565] ? __fget_files+0x206/0x3a0 [ 60.588334][ T6565] __sys_sendmsg+0x16e/0x220 [ 60.589548][ T6565] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.590872][ T6565] __do_fast_syscall_32+0x73/0x120 [ 60.592163][ T6565] do_fast_syscall_32+0x32/0x80 [ 60.593452][ T6565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.595110][ T6565] RIP: 0023:0xf740e579 [ 60.596184][ T6565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.601160][ T6565] RSP: 002b:00000000f50f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 60.603326][ T6565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 60.605370][ T6565] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.607424][ T6565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.609470][ T6565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.611520][ T6565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.613556][ T6565] [ 60.692019][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.694442][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.702968][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.711429][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.890903][ T6578] loop0: detected capacity change from 0 to 16384 [ 61.112914][ T6587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'. [ 61.161740][ T6589] netlink: 'syz.1.138': attribute type 13 has an invalid length. [ 61.163879][ T6589] netlink: 152 bytes leftover after parsing attributes in process `syz.1.138'. [ 61.167121][ T6589] syz_tun: refused to change device tx_queue_len [ 61.168879][ T6589] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 61.491528][ T6603] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 62.434070][ T6620] syz.0.146: attempt to access beyond end of device [ 62.434070][ T6620] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 62.437899][ T6620] FAT-fs (nbd0): unable to read boot sector [ 62.710171][ T6639] ufs: You didn't specify the type of your ufs filesystem [ 62.710171][ T6639] [ 62.710171][ T6639] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 62.710171][ T6639] [ 62.710171][ T6639] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 62.720615][ T6639] syz.2.150: attempt to access beyond end of device [ 62.720615][ T6639] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 62.884591][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 63.294765][ T5995] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.369364][ T1130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.454621][ T5995] usb 6-1: Using ep0 maxpacket: 8 [ 63.458962][ T5995] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 63.461113][ T5995] usb 6-1: config 0 has no interface number 0 [ 63.462756][ T5995] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.465761][ T5995] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 63.468770][ T5995] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.471598][ T5995] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.504290][ T5995] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 63.514674][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.520077][ T5995] usb 6-1: config 0 descriptor?? [ 63.541196][ T5995] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 63.569772][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.573456][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.579187][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.587757][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.590651][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.592690][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.611260][ T6661] lo speed is unknown, defaulting to 1000 [ 63.689286][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 63.738317][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.741067][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.743035][ T6661] bridge_slave_0: entered allmulticast mode [ 63.745252][ T6661] bridge_slave_0: entered promiscuous mode [ 63.748471][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.750354][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.752353][ T6661] bridge_slave_1: entered allmulticast mode [ 63.754425][ T6661] bridge_slave_1: entered promiscuous mode [ 63.782033][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.786591][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.833548][ T6661] team0: Port device team_slave_0 added [ 63.840013][ T6661] team0: Port device team_slave_1 added [ 63.882675][ T6670] capability: warning: `syz.2.156' uses 32-bit capabilities (legacy support in use) [ 63.888239][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.890098][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.897023][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.903911][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 63.903922][ T40] audit: type=1800 audit(1732204192.594:49): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.156" name="[kvm-gmem]" dev="anon_inodefs" ino=15673 res=0 errno=0 [ 63.903952][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.912669][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.919411][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.991299][ T6661] hsr_slave_0: entered promiscuous mode [ 63.994161][ T6661] hsr_slave_1: entered promiscuous mode [ 63.997806][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.000656][ T6661] Cannot create hsr debugfs directory [ 64.236584][ T5995] usb 6-1: USB disconnect, device number 3 [ 64.240609][ T5995] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 64.383298][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.389687][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.625363][ T5843] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.724660][ T5997] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.784737][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 64.792553][ T5843] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 64.797457][ T5843] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 64.802269][ T5843] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 64.806075][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.808733][ T5843] usb 7-1: Product: syz [ 64.810182][ T5843] usb 7-1: Manufacturer: syz [ 64.811783][ T5843] usb 7-1: SerialNumber: syz [ 64.825817][ T5843] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 64.829878][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 64.863929][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.867294][ T5843] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 64.870415][ T5843] usb 7-1: media controller created [ 64.878436][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.890370][ T5997] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.892790][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.898031][ T5843] dvb-usb: bulk message failed: -22 (6/0) [ 64.900253][ T5843] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 64.904036][ T5997] usb 5-1: Product: syz [ 64.905507][ T5997] usb 5-1: Manufacturer: syz [ 64.907088][ T5997] usb 5-1: SerialNumber: syz [ 64.912512][ T5843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input6 [ 64.920418][ T5997] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 64.927514][ T5843] dvb-usb: schedule remote query interval to 150 msecs. [ 64.931104][ T5843] dvb-usb: bulk message failed: -22 (3/0) [ 64.946346][ T5997] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 64.954957][ T5843] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 65.034410][ T8] usb 7-1: USB disconnect, device number 6 [ 65.063456][ T8] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 65.199986][ T1130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.260653][ T1130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.319315][ T1130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.428616][ T1130] bridge_slave_1: left allmulticast mode [ 65.430145][ T1130] bridge_slave_1: left promiscuous mode [ 65.432470][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.439224][ T1130] bridge_slave_0: left allmulticast mode [ 65.440711][ T1130] bridge_slave_0: left promiscuous mode [ 65.442265][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.570363][ T5843] usb 5-1: USB disconnect, device number 4 [ 65.621052][ T64] Bluetooth: hci1: command tx timeout [ 65.751246][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.756099][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.760747][ T1130] bond0 (unregistering): Released all slaves [ 66.019600][ T5997] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 66.022709][ T5997] ath9k_htc: Failed to initialize the device [ 66.030066][ T5843] usb 5-1: ath9k_htc: USB layer deinitialized [ 66.077764][ T1130] hsr_slave_0: left promiscuous mode [ 66.079718][ T1130] hsr_slave_1: left promiscuous mode [ 66.082261][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.084210][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.087413][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.089338][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.105988][ T1130] veth1_macvtap: left promiscuous mode [ 66.107542][ T1130] veth0_macvtap: left promiscuous mode [ 66.109154][ T1130] veth1_vlan: left promiscuous mode [ 66.110623][ T1130] veth0_vlan: left promiscuous mode [ 66.709240][ T6721] overlay: ./file0 is not a directory [ 66.736766][ T40] audit: type=1800 audit(1732204195.434:50): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.164" name="bus" dev="9p" ino=40372905 res=0 errno=0 [ 66.811282][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 66.884291][ T6726] syz.2.164: attempt to access beyond end of device [ 66.884291][ T6726] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 66.884629][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 66.891221][ T6726] efs: cannot read volume header [ 67.360355][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 67.395230][ T6661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.401118][ T6661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.406180][ T6661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.411037][ T6661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.476714][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.488807][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.494452][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.496483][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.503148][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.505133][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.597171][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.620626][ T6661] veth0_vlan: entered promiscuous mode [ 67.629329][ T6661] veth1_vlan: entered promiscuous mode [ 67.650479][ T6661] veth0_macvtap: entered promiscuous mode [ 67.669017][ T6661] veth1_macvtap: entered promiscuous mode [ 67.687666][ T64] Bluetooth: hci1: command tx timeout [ 67.693887][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.699855][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.710647][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.713395][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.722312][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.727932][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731221][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.742005][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.746427][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.749013][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.757193][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.761072][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.766709][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.770790][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.779263][ T6661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.783294][ T6661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.786200][ T6661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.788409][ T6661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.856132][ T6743] lo speed is unknown, defaulting to 1000 [ 67.883911][ T6746] lo speed is unknown, defaulting to 1000 [ 67.901967][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.904915][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.948887][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.951611][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.045107][ T6761] netlink: 84 bytes leftover after parsing attributes in process `syz.0.172'. [ 68.512407][ T6768] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 68.555875][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 69.811238][ T6792] lo speed is unknown, defaulting to 1000 [ 69.901029][ T6798] netlink: 'syz.2.181': attribute type 2 has an invalid length. [ 69.914038][ T6798] : entered promiscuous mode [ 70.151905][ T40] audit: type=1400 audit(1732204198.844:51): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=6811 comm="syz.1.185" [ 70.521348][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.737122][ T1409] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.738977][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.969005][ T6828] trusted_key: syz.2.187 sent an empty control message without MSG_MORE. [ 71.079267][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.085089][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.088169][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.091268][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.095107][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.097901][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.139518][ T6829] lo speed is unknown, defaulting to 1000 [ 71.168305][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 71.211872][ T6840] lo speed is unknown, defaulting to 1000 [ 71.211943][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 71.429388][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.432088][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.437126][ T6829] bridge_slave_0: entered allmulticast mode [ 71.441468][ T6829] bridge_slave_0: entered promiscuous mode [ 71.455807][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.458207][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.461116][ T6829] bridge_slave_1: entered allmulticast mode [ 71.467234][ T6829] bridge_slave_1: entered promiscuous mode [ 71.570200][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.573913][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.619051][ T6829] team0: Port device team_slave_0 added [ 71.620928][ T6853] lo speed is unknown, defaulting to 1000 [ 71.623151][ T6829] team0: Port device team_slave_1 added [ 71.671766][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.673629][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.679987][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.686370][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.688201][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.696037][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.762376][ T6829] hsr_slave_0: entered promiscuous mode [ 71.764397][ T6829] hsr_slave_1: entered promiscuous mode [ 71.962123][ T6861] process 'syz.1.192' launched './file1' with NULL argv: empty string added [ 71.973303][ T6860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 72.003859][ T6861] xt_bpf: check failed: parse error [ 72.316637][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.352366][ T6896] lo speed is unknown, defaulting to 1000 [ 72.416205][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.501207][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.687750][ T68] bridge_slave_1: left allmulticast mode [ 72.689226][ T68] bridge_slave_1: left promiscuous mode [ 72.690717][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.700188][ T68] bridge_slave_0: left allmulticast mode [ 72.701609][ T68] bridge_slave_0: left promiscuous mode [ 72.703066][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.749810][ T6915] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 72.752341][ T6915] overlayfs: missing 'lowerdir' [ 73.067445][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.077128][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.082053][ T68] bond0 (unregistering): Released all slaves [ 73.214630][ T64] Bluetooth: hci1: command tx timeout [ 73.482965][ T68] hsr_slave_0: left promiscuous mode [ 73.485947][ T68] hsr_slave_1: left promiscuous mode [ 73.488284][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.490197][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.492677][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.494952][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.518856][ T68] veth1_macvtap: left promiscuous mode [ 73.521353][ T68] veth0_macvtap: left promiscuous mode [ 73.522881][ T68] veth1_vlan: left promiscuous mode [ 73.524179][ T68] veth0_vlan: left promiscuous mode [ 73.649174][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.200'. [ 73.651515][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 73.653766][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.200'. [ 73.657554][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.200'. [ 73.963440][ T6955] binder: 6954:6955 ioctl 806c4120 200002c0 returned -22 [ 74.243514][ T6963] overlay: Unknown parameter 'dont_appraise' [ 74.356489][ T68] team0 (unregistering): Port device team_slave_1 removed [ 74.435912][ T68] team0 (unregistering): Port device team_slave_0 removed [ 75.069210][ T6959] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 75.212529][ T6980] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.239377][ T6829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.248353][ T6829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.260810][ T6829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.266187][ T6829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.316446][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.323016][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.327437][ T64] Bluetooth: hci1: command tx timeout [ 75.331591][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.334169][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.371335][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.373909][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.447834][ T6829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.538469][ T7000] overlayfs: missing 'lowerdir' [ 75.559857][ T7000] qnx6: Unknown parameter 'trans' [ 75.648093][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.669369][ T6829] veth0_vlan: entered promiscuous mode [ 75.673969][ T6829] veth1_vlan: entered promiscuous mode [ 75.688878][ T6829] veth0_macvtap: entered promiscuous mode [ 75.700663][ T6829] veth1_macvtap: entered promiscuous mode [ 75.711333][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.719478][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.722880][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.729693][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.733071][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.740413][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.744990][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.752307][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.757805][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.761340][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.764965][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.768343][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.772027][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.776773][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.835653][ T6829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.837910][ T6829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.840408][ T6829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.842620][ T6829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.859215][ T2208] cfg80211: failed to load regulatory.db [ 75.882841][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.888127][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.900128][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.907768][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.178142][ T7013] libceph: resolve '. [ 76.178142][ T7013] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 76.178142][ T7013] ' (ret=-3): failed [ 76.199647][ T7013] autofs: Unknown parameter '/dev/ttyS3' [ 76.482457][ T40] audit: type=1326 audit(1732204205.174:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.492580][ T40] audit: type=1326 audit(1732204205.174:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.501104][ T40] audit: type=1326 audit(1732204205.184:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.509533][ T40] audit: type=1326 audit(1732204205.184:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.516889][ T40] audit: type=1326 audit(1732204205.184:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.522709][ T40] audit: type=1326 audit(1732204205.184:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.528234][ T40] audit: type=1326 audit(1732204205.184:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.535900][ T40] audit: type=1326 audit(1732204205.194:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f775a7 code=0x7ffc0000 [ 76.542235][ T40] audit: type=1326 audit(1732204205.194:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.547984][ T40] audit: type=1326 audit(1732204205.194:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 76.766490][ T7022] sp0: Synchronizing with TNC [ 77.454638][ T5997] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.604600][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 77.607791][ T5997] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.609780][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.612617][ T5997] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.615770][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.618575][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.622464][ T5997] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.624309][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.627136][ T5997] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.630081][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.632926][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.638944][ T5997] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 77.641009][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 77.643857][ T5997] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.646975][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.649958][ T5997] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.656546][ T5997] usb 5-1: string descriptor 0 read error: -22 [ 77.658264][ T5997] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.660578][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.667771][ T5997] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 77.942199][ T9] usb 5-1: USB disconnect, device number 5 [ 78.295488][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.328858][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.474612][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 78.478192][ T9] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 78.481140][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 62, using maximum allowed: 30 [ 78.483954][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 78.487642][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.490868][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.496700][ T9] usb 5-1: config 0 descriptor?? [ 78.968089][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.972125][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.975160][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.978897][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.982018][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.984139][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.004090][ T7058] lo speed is unknown, defaulting to 1000 [ 79.063726][ T7058] chnl_net:caif_netlink_parms(): no params data found [ 79.131985][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.134634][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.137201][ T7058] bridge_slave_0: entered allmulticast mode [ 79.140015][ T7058] bridge_slave_0: entered promiscuous mode [ 79.143455][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.145608][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.147495][ T7058] bridge_slave_1: entered allmulticast mode [ 79.149486][ T7058] bridge_slave_1: entered promiscuous mode [ 79.171598][ T7058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.175601][ T7058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.196480][ T7058] team0: Port device team_slave_0 added [ 79.200751][ T7058] team0: Port device team_slave_1 added [ 79.229940][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.231855][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.238672][ T7058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.242550][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.244344][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.250942][ T7058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.275805][ T7058] hsr_slave_0: entered promiscuous mode [ 79.278268][ T7058] hsr_slave_1: entered promiscuous mode [ 79.279996][ T7058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.281973][ T7058] Cannot create hsr debugfs directory [ 79.936056][ T7073] overlayfs: conflicting options: metacopy=off,verity=on [ 80.081404][ T9] usb 5-1: string descriptor 0 read error: -71 [ 80.100726][ T9] usb 5-1: USB disconnect, device number 6 [ 80.114696][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.207840][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.294069][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.445354][ T68] bridge_slave_1: left allmulticast mode [ 80.446928][ T68] bridge_slave_1: left promiscuous mode [ 80.449832][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.456930][ T68] bridge_slave_0: left allmulticast mode [ 80.458440][ T68] bridge_slave_0: left promiscuous mode [ 80.459944][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.791540][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.798279][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.803126][ T68] bond0 (unregistering): Released all slaves [ 81.054675][ T64] Bluetooth: hci1: command tx timeout [ 81.305760][ T7058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.319719][ T7058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.330743][ T68] hsr_slave_0: left promiscuous mode [ 81.332861][ T68] hsr_slave_1: left promiscuous mode [ 81.337827][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.343023][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.346157][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.348155][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.380099][ T68] veth1_macvtap: left promiscuous mode [ 81.381622][ T68] veth0_macvtap: left promiscuous mode [ 81.383112][ T68] veth1_vlan: left promiscuous mode [ 81.385120][ T68] veth0_vlan: left promiscuous mode [ 82.104892][ T68] team0 (unregistering): Port device team_slave_1 removed [ 82.177418][ T68] team0 (unregistering): Port device team_slave_0 removed [ 82.759590][ T7058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.763134][ T7058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.793840][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.801649][ T7058] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.813374][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.815363][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.827385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.829327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.962571][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.981733][ T7058] veth0_vlan: entered promiscuous mode [ 82.988110][ T7058] veth1_vlan: entered promiscuous mode [ 83.007397][ T7058] veth0_macvtap: entered promiscuous mode [ 83.011772][ T7058] veth1_macvtap: entered promiscuous mode [ 83.021943][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.026551][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.029751][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.033218][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.036481][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.039869][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.044126][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.050499][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.053272][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.056050][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.058779][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.061288][ T7058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.063982][ T7058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.067434][ T7058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.073311][ T7058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.075780][ T7058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.078042][ T7058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.080307][ T7058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.107270][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.109968][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.120519][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.122630][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.134674][ T64] Bluetooth: hci1: command tx timeout [ 85.368887][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.138760][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.141716][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.145293][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.149373][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.152476][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.155257][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.171314][ T7146] lo speed is unknown, defaulting to 1000 [ 86.232137][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 86.305877][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.308003][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.309948][ T7146] bridge_slave_0: entered allmulticast mode [ 86.312007][ T7146] bridge_slave_0: entered promiscuous mode [ 86.314969][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.316868][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.318788][ T7146] bridge_slave_1: entered allmulticast mode [ 86.320854][ T7146] bridge_slave_1: entered promiscuous mode [ 86.339698][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.343447][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.363810][ T7146] team0: Port device team_slave_0 added [ 86.366631][ T7146] team0: Port device team_slave_1 added [ 86.383352][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.385365][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.392051][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.396420][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.398892][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.407126][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.440977][ T7146] hsr_slave_0: entered promiscuous mode [ 86.443059][ T7146] hsr_slave_1: entered promiscuous mode [ 87.086929][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.172990][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.228922][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.373540][ T12] bridge_slave_1: left allmulticast mode [ 87.375578][ T12] bridge_slave_1: left promiscuous mode [ 87.377563][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.381157][ T12] bridge_slave_0: left allmulticast mode [ 87.382695][ T12] bridge_slave_0: left promiscuous mode [ 87.384255][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.704929][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.708695][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.712251][ T12] bond0 (unregistering): Released all slaves [ 88.026774][ T12] hsr_slave_0: left promiscuous mode [ 88.035002][ T12] hsr_slave_1: left promiscuous mode [ 88.037542][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.039542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.042109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.044124][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.071313][ T12] veth1_macvtap: left promiscuous mode [ 88.073012][ T12] veth0_macvtap: left promiscuous mode [ 88.074744][ T12] veth1_vlan: left promiscuous mode [ 88.076141][ T12] veth0_vlan: left promiscuous mode [ 88.166613][ T64] Bluetooth: hci1: command tx timeout [ 88.652388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.716465][ T12] team0 (unregistering): Port device team_slave_0 removed [ 89.306713][ T7146] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.311494][ T7146] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.315985][ T7146] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.319212][ T7146] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.358407][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.376536][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.380878][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.382832][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.388627][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.390983][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.510403][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.529718][ T7146] veth0_vlan: entered promiscuous mode [ 89.534010][ T7146] veth1_vlan: entered promiscuous mode [ 89.545376][ T7146] veth0_macvtap: entered promiscuous mode [ 89.548359][ T7146] veth1_macvtap: entered promiscuous mode [ 89.554003][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.557321][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.559840][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.562527][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.565130][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.568163][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.572507][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.579529][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.582381][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.584994][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.587671][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.590772][ T7146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.593960][ T7146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.597994][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.603652][ T7146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.608175][ T7146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.611116][ T7146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614088][ T7146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.648842][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.651893][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.664434][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.667746][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.876428][ T1050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.714143][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.718014][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.721629][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.725724][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.728701][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.731862][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.758762][ T7183] lo speed is unknown, defaulting to 1000 [ 92.812281][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 92.850100][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.852022][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.854270][ T7183] bridge_slave_0: entered allmulticast mode [ 92.856877][ T7183] bridge_slave_0: entered promiscuous mode [ 92.861297][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.863173][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.865139][ T7183] bridge_slave_1: entered allmulticast mode [ 92.867299][ T7183] bridge_slave_1: entered promiscuous mode [ 92.888520][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.893665][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.915245][ T7183] team0: Port device team_slave_0 added [ 92.917995][ T7183] team0: Port device team_slave_1 added [ 92.935462][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.937295][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.944057][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.948203][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.950030][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.956890][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.982533][ T7183] hsr_slave_0: entered promiscuous mode [ 92.984618][ T7183] hsr_slave_1: entered promiscuous mode [ 92.986462][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.988431][ T7183] Cannot create hsr debugfs directory [ 93.454634][ T1050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.550778][ T1050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.660273][ T1050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.752734][ T1050] bridge_slave_1: left allmulticast mode [ 93.754719][ T1050] bridge_slave_1: left promiscuous mode [ 93.756584][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.760624][ T1050] bridge_slave_0: left allmulticast mode [ 93.762149][ T1050] bridge_slave_0: left promiscuous mode [ 93.763703][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.017351][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.021112][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.024753][ T1050] bond0 (unregistering): Released all slaves [ 94.386639][ T1050] hsr_slave_0: left promiscuous mode [ 94.388461][ T1050] hsr_slave_1: left promiscuous mode [ 94.390234][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.392169][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.394417][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.396458][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.412506][ T1050] veth1_macvtap: left promiscuous mode [ 94.416023][ T1050] veth0_macvtap: left promiscuous mode [ 94.417555][ T1050] veth1_vlan: left promiscuous mode [ 94.418982][ T1050] veth0_vlan: left promiscuous mode [ 94.808157][ T5966] Bluetooth: hci1: command tx timeout [ 95.118958][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 95.193230][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 95.819793][ T7183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.824733][ T7183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.827921][ T7183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.831042][ T7183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.883832][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.891315][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.897217][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.899113][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.903158][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.905615][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.004044][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.022992][ T7183] veth0_vlan: entered promiscuous mode [ 96.027723][ T7183] veth1_vlan: entered promiscuous mode [ 96.039241][ T7183] veth0_macvtap: entered promiscuous mode [ 96.042642][ T7183] veth1_macvtap: entered promiscuous mode [ 96.050065][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.052990][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.056125][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.059770][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.063241][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.067350][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.072139][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.078202][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.081054][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.083671][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.088592][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.091235][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.094140][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.098696][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.104457][ T7183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.107837][ T7183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.111257][ T7183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.114393][ T7183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.146553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.149320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.157851][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.160608][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.601736][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.530809][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.538105][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.541850][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.545767][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.548744][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.551406][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.568129][ T7236] lo speed is unknown, defaulting to 1000 [ 99.615660][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 99.679522][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.681518][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.683525][ T7236] bridge_slave_0: entered allmulticast mode [ 99.686326][ T7236] bridge_slave_0: entered promiscuous mode [ 99.689209][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.691553][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.693948][ T7236] bridge_slave_1: entered allmulticast mode [ 99.697725][ T7236] bridge_slave_1: entered promiscuous mode [ 99.733870][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.739694][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.776017][ T7236] team0: Port device team_slave_0 added [ 99.781252][ T7236] team0: Port device team_slave_1 added [ 99.811146][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.813588][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.823199][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.828344][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.830901][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.839364][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.872261][ T7236] hsr_slave_0: entered promiscuous mode [ 99.875387][ T7236] hsr_slave_1: entered promiscuous mode [ 100.240707][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.318156][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.393396][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.484900][ T12] bridge_slave_1: left allmulticast mode [ 100.486861][ T12] bridge_slave_1: left promiscuous mode [ 100.489272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.493315][ T12] bridge_slave_0: left allmulticast mode [ 100.495770][ T12] bridge_slave_0: left promiscuous mode [ 100.497340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.784373][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.790820][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.796785][ T12] bond0 (unregistering): Released all slaves [ 101.141847][ T12] hsr_slave_0: left promiscuous mode [ 101.144403][ T12] hsr_slave_1: left promiscuous mode [ 101.147615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.150255][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.153308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.160011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.201259][ T12] veth1_macvtap: left promiscuous mode [ 101.203322][ T12] veth0_macvtap: left promiscuous mode [ 101.205328][ T12] veth1_vlan: left promiscuous mode [ 101.207032][ T12] veth0_vlan: left promiscuous mode [ 101.618343][ T5966] Bluetooth: hci1: command tx timeout [ 101.957797][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.040312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 102.760740][ T7236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.764172][ T7236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.767922][ T7236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.771081][ T7236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.800596][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.830319][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.836092][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.837973][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.843040][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.845015][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.924030][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.943910][ T7236] veth0_vlan: entered promiscuous mode [ 102.949991][ T7236] veth1_vlan: entered promiscuous mode [ 102.959536][ T7236] veth0_macvtap: entered promiscuous mode [ 102.962466][ T7236] veth1_macvtap: entered promiscuous mode [ 102.969037][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.971747][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.974292][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.980063][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.982618][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.985556][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.988722][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.993899][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.996760][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.999313][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.001995][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.005458][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.008159][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.011331][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.015277][ T7236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.017520][ T7236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.019767][ T7236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.022033][ T7236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.047280][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.050071][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.059047][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.061126][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.043144][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 104.054438][ T7295] netlink: 'syz.2.241': attribute type 32 has an invalid length. [ 104.056885][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 104.059263][ T7295] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 104.085683][ T7295] netlink: 'syz.2.241': attribute type 8 has an invalid length. [ 104.097590][ T7298] tipc: Started in network mode [ 104.099440][ T7298] tipc: Node identity e0000002, cluster identity 4711 [ 104.101818][ T7298] tipc: Enabling of bearer rejected, failed to enable media [ 104.107986][ T7298] loop7: detected capacity change from 0 to 16384 [ 104.127459][ T7299] lo speed is unknown, defaulting to 1000 [ 104.147335][ T7302] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.241'. [ 104.151527][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 104.171851][ T7303] pimreg: entered allmulticast mode [ 104.983919][ T7308] lo speed is unknown, defaulting to 1000 [ 105.001492][ T7310] mkiss: ax0: crc mode is auto. [ 105.123368][ T7316] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 105.123368][ T7316] program syz.0.245 not setting count and/or reply_len properly [ 105.217873][ T7317] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 105.220634][ T7317] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.246'. [ 105.223673][ T7317] nbd: couldn't find device at index 16 [ 105.480391][ T7323] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 105.482147][ T7323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.484163][ T7323] vhci_hcd vhci_hcd.0: Device attached [ 105.627513][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.687013][ T7140] vhci_hcd: vhci_device speed not set [ 105.744671][ T7140] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 106.767105][ T7324] vhci_hcd: connection reset by peer [ 106.768969][ T1050] vhci_hcd: stop threads [ 106.770265][ T1050] vhci_hcd: release socket [ 106.773739][ T1050] vhci_hcd: disconnect device [ 106.845707][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.849803][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.853339][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.862348][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.865419][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.868655][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.879371][ T7337] lo speed is unknown, defaulting to 1000 [ 106.885345][ T7338] trusted_key: encrypted_key: insufficient parameters specified [ 106.896879][ T7335] lo speed is unknown, defaulting to 1000 [ 106.963233][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 107.046100][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.049181][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.051307][ T7335] bridge_slave_0: entered allmulticast mode [ 107.053378][ T7335] bridge_slave_0: entered promiscuous mode [ 107.057747][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.059602][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.061489][ T7335] bridge_slave_1: entered allmulticast mode [ 107.064332][ T7335] bridge_slave_1: entered promiscuous mode [ 107.129811][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.134065][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.217433][ T7335] team0: Port device team_slave_0 added [ 107.220140][ T7335] team0: Port device team_slave_1 added [ 107.255022][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.256968][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.263521][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.271171][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.273023][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.280415][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.309984][ T40] kauditd_printk_skb: 874 callbacks suppressed [ 107.309995][ T40] audit: type=1326 audit(1732204236.004:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.326091][ T40] audit: type=1326 audit(1732204236.014:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.334761][ T40] audit: type=1326 audit(1732204236.014:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.340269][ T40] audit: type=1326 audit(1732204236.014:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.354833][ T40] audit: type=1326 audit(1732204236.014:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.360329][ T40] audit: type=1326 audit(1732204236.014:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.374577][ T40] audit: type=1326 audit(1732204236.024:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.391383][ T40] audit: type=1326 audit(1732204236.024:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f775a7 code=0x7ffc0000 [ 107.399109][ T7335] hsr_slave_0: entered promiscuous mode [ 107.403408][ T40] audit: type=1326 audit(1732204236.024:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f77579 code=0x7ffc0000 [ 107.409920][ T7335] hsr_slave_1: entered promiscuous mode [ 107.413909][ T7335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.414556][ T40] audit: type=1326 audit(1732204236.024:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.254" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f775a7 code=0x7ffc0000 [ 107.416346][ T7335] Cannot create hsr debugfs directory [ 107.593980][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.658580][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.735695][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.849147][ T11] bridge_slave_1: left allmulticast mode [ 107.850787][ T11] bridge_slave_1: left promiscuous mode [ 107.852768][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.862649][ T11] bridge_slave_0: left allmulticast mode [ 107.864813][ T11] bridge_slave_0: left promiscuous mode [ 107.866836][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.131100][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.135823][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.140029][ T11] bond0 (unregistering): Released all slaves [ 108.157847][ T7361] lo speed is unknown, defaulting to 1000 [ 108.580702][ T11] hsr_slave_0: left promiscuous mode [ 108.583407][ T11] hsr_slave_1: left promiscuous mode [ 108.591783][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.593787][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.596472][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.598350][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.618614][ T11] veth1_macvtap: left promiscuous mode [ 108.620164][ T11] veth0_macvtap: left promiscuous mode [ 108.621654][ T11] veth1_vlan: left promiscuous mode [ 108.623084][ T11] veth0_vlan: left promiscuous mode [ 108.885652][ T5966] Bluetooth: hci1: command tx timeout [ 109.412324][ T11] team0 (unregistering): Port device team_slave_1 removed [ 109.490560][ T11] team0 (unregistering): Port device team_slave_0 removed [ 110.110248][ T7429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.264'. [ 110.205402][ T7436] bridge_slave_0: left allmulticast mode [ 110.207507][ T7436] bridge_slave_0: left promiscuous mode [ 110.211306][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.218195][ T7436] bridge_slave_1: left allmulticast mode [ 110.220178][ T7436] bridge_slave_1: left promiscuous mode [ 110.222441][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.229107][ T7436] bond0: (slave bond_slave_0): Releasing backup interface [ 110.237016][ T7436] bond0: (slave bond_slave_1): Releasing backup interface [ 110.251701][ T7436] team0: Port device team_slave_0 removed [ 110.258443][ T7436] team0: Port device team_slave_1 removed [ 110.260565][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.262942][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.267528][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.269827][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.277839][ T7335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.290723][ T7335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.508444][ T7436] capability: warning: `syz.1.265' uses deprecated v2 capabilities in a way that may be insecure [ 110.884873][ T7140] vhci_hcd: vhci_device speed not set [ 110.974848][ T5966] Bluetooth: hci1: command tx timeout [ 111.511021][ T7335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.516751][ T7446] lo speed is unknown, defaulting to 1000 [ 111.529549][ T7458] lo speed is unknown, defaulting to 1000 [ 111.532549][ T7335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.604251][ T7335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.614255][ T7335] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.620396][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.622365][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.627708][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.629618][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.673151][ T7335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.678156][ T7335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.760416][ T7335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.825377][ T7335] veth0_vlan: entered promiscuous mode [ 111.833237][ T7335] veth1_vlan: entered promiscuous mode [ 111.856619][ T7335] veth0_macvtap: entered promiscuous mode [ 111.861999][ T7335] veth1_macvtap: entered promiscuous mode [ 111.874681][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.878699][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.881382][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.885023][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.888426][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.898358][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.901620][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.904408][ T7335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.909738][ T7335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.925067][ T7335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.931550][ T7335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.941135][ T7335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.945065][ T7335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.947405][ T7335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.037460][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.039918][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.051782][ T7475] tmpfs: Bad value for 'mpol' [ 112.058246][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.064400][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.120668][ T7478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.137162][ T7473] ================================================================== [ 112.139278][ T7473] BUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0 [ 112.141463][ T7473] Read of size 8 at addr ffff8880509a9308 by task kbnepd bnep0/7473 [ 112.144091][ T7473] [ 112.145168][ T7473] CPU: 3 UID: 0 PID: 7473 Comm: kbnepd bnep0 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 112.148106][ T7473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.150853][ T7473] Call Trace: [ 112.151731][ T7473] [ 112.152522][ T7473] dump_stack_lvl+0x116/0x1f0 [ 112.153788][ T7473] print_report+0xc3/0x620 [ 112.154969][ T7473] ? __virt_addr_valid+0x5e/0x590 [ 112.156276][ T7473] ? __phys_addr+0xc6/0x150 [ 112.157457][ T7473] kasan_report+0xd9/0x110 [ 112.158625][ T7473] ? device_for_each_child+0x18f/0x1a0 [ 112.160039][ T7473] ? device_for_each_child+0x18f/0x1a0 [ 112.161449][ T7473] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 112.162872][ T7473] device_for_each_child+0x18f/0x1a0 [ 112.164242][ T7473] ? __pfx_device_for_each_child+0x10/0x10 [ 112.165760][ T7473] pm_runtime_set_memalloc_noio+0xf2/0x180 [ 112.167428][ T7473] netdev_unregister_kobject+0x1ed/0x270 [ 112.168888][ T7473] unregister_netdevice_many_notify+0x1055/0x1e50 [ 112.170552][ T7473] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 112.172294][ T7473] ? lockdep_hardirqs_on+0x7c/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.173655][ T7473] ? unregister_netdev+0x12/0x30 [ 112.175209][ T7473] ? __pfx___mutex_lock+0x10/0x10 [ 112.176525][ T7473] unregister_netdevice_queue+0x307/0x3f0 [ 112.178005][ T7473] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 112.179630][ T7473] ? down_write+0x14e/0x200 [ 112.180788][ T7473] ? __pfx_down_write+0x10/0x10 [ 112.182043][ T7473] unregister_netdev+0x1c/0x30 [ 112.183306][ T7473] bnep_session+0x1f95/0x2a50 [ 112.184529][ T7473] ? lock_acquire.part.0+0x11b/0x380 [ 112.185919][ T7473] ? find_held_lock+0x2d/0x110 [ 112.187196][ T7473] ? __pfx_bnep_session+0x10/0x10 [ 112.188504][ T7473] ? __kthread_parkme+0xb7/0x220 [ 112.189802][ T7473] ? __pfx_lock_release+0x10/0x10 [ 112.191137][ T7473] ? __pfx_woken_wake_function+0x10/0x10 [ 112.192606][ T7473] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.194133][ T7473] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.195487][ T7473] ? __kthread_parkme+0x148/0x220 [ 112.196754][ T7473] ? __pfx_bnep_session+0x10/0x10 [ 112.198085][ T7473] kthread+0x2c1/0x3a0 [ 112.199173][ T7473] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.200533][ T7473] ? __pfx_kthread+0x10/0x10 [ 112.201746][ T7473] ret_from_fork+0x45/0x80 [ 112.202943][ T7473] ? __pfx_kthread+0x10/0x10 [ 112.204156][ T7473] ret_from_fork_asm+0x1a/0x30 [ 112.205412][ T7473] [ 112.206244][ T7473] [ 112.206872][ T7473] Allocated by task 7335: [ 112.207996][ T7473] kasan_save_stack+0x33/0x60 [ 112.209231][ T7473] kasan_save_track+0x14/0x30 [ 112.210483][ T7473] __kasan_kmalloc+0xaa/0xb0 [ 112.211703][ T7473] __kmalloc_noprof+0x1e8/0x410 [ 112.212978][ T7473] hci_alloc_dev_priv+0x1d/0x2820 [ 112.214310][ T7473] __vhci_create_device+0xef/0x7d0 [ 112.215625][ T7473] vhci_write+0x2c3/0x470 [ 112.216717][ T7473] vfs_write+0x5ae/0x1150 [ 112.217848][ T7473] ksys_write+0x12b/0x250 [ 112.219008][ T7473] __do_fast_syscall_32+0x73/0x120 [ 112.220286][ T7473] do_fast_syscall_32+0x32/0x80 [ 112.221563][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.223239][ T7473] [ 112.223874][ T7473] Freed by task 7335: [ 112.225001][ T7473] kasan_save_stack+0x33/0x60 [ 112.226208][ T7473] kasan_save_track+0x14/0x30 [ 112.227403][ T7473] kasan_save_free_info+0x3b/0x60 [ 112.228726][ T7473] __kasan_slab_free+0x51/0x70 [ 112.229976][ T7473] kfree+0x14f/0x4b0 [ 112.231036][ T7473] hci_release_dev+0x4d9/0x600 [ 112.232299][ T7473] bt_host_release+0x6a/0xb0 [ 112.233670][ T7473] device_release+0xa1/0x240 [ 112.234905][ T7473] kobject_put+0x1e4/0x5a0 [ 112.236084][ T7473] put_device+0x1f/0x30 [ 112.237169][ T7473] vhci_release+0x81/0xf0 [ 112.238309][ T7473] __fput+0x3f8/0xb60 [ 112.239360][ T7473] task_work_run+0x14e/0x250 [ 112.240569][ T7473] do_exit+0xadd/0x2d70 [ 112.241646][ T7473] do_group_exit+0xd3/0x2a0 [ 112.242849][ T7473] __ia32_sys_exit_group+0x3e/0x50 [ 112.244179][ T7473] ia32_sys_call+0x1b1c/0x1c20 [ 112.245429][ T7473] __do_fast_syscall_32+0x73/0x120 [ 112.246768][ T7473] do_fast_syscall_32+0x32/0x80 [ 112.248033][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.249684][ T7473] [ 112.250319][ T7473] Last potentially related work creation: [ 112.251769][ T7473] kasan_save_stack+0x33/0x60 [ 112.252995][ T7473] __kasan_record_aux_stack+0xba/0xd0 [ 112.254385][ T7473] insert_work+0x36/0x230 [ 112.255505][ T7473] __queue_work+0x3f8/0x1080 [ 112.256699][ T7473] queue_work_on+0x11a/0x140 [ 112.257892][ T7473] process_one_work+0x958/0x1b30 [ 112.259173][ T7473] worker_thread+0x6c8/0xf00 [ 112.260380][ T7473] kthread+0x2c1/0x3a0 [ 112.261444][ T7473] ret_from_fork+0x45/0x80 [ 112.262617][ T7473] ret_from_fork_asm+0x1a/0x30 [ 112.263801][ T7473] [ 112.264367][ T7473] Second to last potentially related work creation: [ 112.266057][ T7473] kasan_save_stack+0x33/0x60 [ 112.267282][ T7473] __kasan_record_aux_stack+0xba/0xd0 [ 112.268665][ T7473] insert_work+0x36/0x230 [ 112.269787][ T7473] __queue_work+0x97e/0x1080 [ 112.271012][ T7473] call_timer_fn+0x1a0/0x610 [ 112.272164][ T7473] __run_timers+0x56a/0x930 [ 112.273352][ T7473] run_timer_base+0x114/0x190 [ 112.274580][ T7473] run_timer_softirq+0x1a/0x40 [ 112.275830][ T7473] handle_softirqs+0x213/0x8f0 [ 112.277067][ T7473] __irq_exit_rcu+0x109/0x170 [ 112.278294][ T7473] irq_exit_rcu+0x9/0x30 [ 112.279399][ T7473] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 112.280858][ T7473] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.282417][ T7473] [ 112.283045][ T7473] The buggy address belongs to the object at ffff8880509a8000 [ 112.283045][ T7473] which belongs to the cache kmalloc-8k of size 8192 [ 112.286595][ T7473] The buggy address is located 4872 bytes inside of [ 112.286595][ T7473] freed 8192-byte region [ffff8880509a8000, ffff8880509aa000) [ 112.290088][ T7473] [ 112.290725][ T7473] The buggy address belongs to the physical page: [ 112.292378][ T7473] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x509a8 [ 112.294652][ T7473] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.296827][ T7473] ksm flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 112.298894][ T7473] page_type: f5(slab) [ 112.299941][ T7473] raw: 04fff00000000040 ffff88801ac43180 ffffea000134f400 dead000000000003 [ 112.302165][ T7473] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 112.304371][ T7473] head: 04fff00000000040 ffff88801ac43180 ffffea000134f400 dead000000000003 [ 112.306610][ T7473] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 112.308835][ T7473] head: 04fff00000000003 ffffea0001426a01 ffffffffffffffff 0000000000000000 [ 112.311020][ T7473] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 112.313246][ T7473] page dumped because: kasan: bad access detected [ 112.314906][ T7473] page_owner tracks the page as allocated [ 112.316369][ T7473] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5953, tgid 5953 (syz-executor), ts 38429971184, free_ts 37543661685 [ 112.321603][ T7473] post_alloc_hook+0x2d1/0x350 [ 112.322901][ T7473] get_page_from_freelist+0xfce/0x2f80 [ 112.324315][ T7473] __alloc_pages_noprof+0x223/0x25a0 [ 112.325685][ T7473] alloc_pages_mpol_noprof+0x2c9/0x610 [ 112.327110][ T7473] new_slab+0x2c9/0x410 [ 112.328200][ T7473] ___slab_alloc+0xd1d/0x16f0 [ 112.329431][ T7473] __slab_alloc.constprop.0+0x56/0xb0 [ 112.330839][ T7473] __kmalloc_node_noprof+0x367/0x440 [ 112.332214][ T7473] __kvmalloc_node_noprof+0x6f/0x1a0 [ 112.333602][ T7473] wg_packet_queue_init+0x95/0x320 [ 112.334943][ T7473] wg_newlink+0x301/0x700 [ 112.336088][ T7473] __rtnl_newlink+0x119c/0x1920 [ 112.337356][ T7473] rtnl_newlink+0x67/0xa0 [ 112.338495][ T7473] rtnetlink_rcv_msg+0x3c7/0xea0 [ 112.339785][ T7473] netlink_rcv_skb+0x165/0x410 [ 112.341032][ T7473] netlink_unicast+0x53c/0x7f0 [ 112.342276][ T7473] page last free pid 5870 tgid 5870 stack trace: [ 112.343902][ T7473] free_unref_folios+0xa87/0x14f0 [ 112.345209][ T7473] folios_put_refs+0x587/0x7b0 [ 112.346455][ T7473] free_pages_and_swap_cache+0x36d/0x510 [ 112.347906][ T7473] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 112.349451][ T7473] tlb_finish_mmu+0x168/0x7b0 [ 112.350682][ T7473] vms_clear_ptes+0x565/0x780 [ 112.351900][ T7473] vms_complete_munmap_vmas+0x1ce/0x980 [ 112.353324][ T7473] do_vmi_align_munmap+0x619/0x890 [ 112.354653][ T7473] do_vmi_munmap+0x20b/0x3e0 [ 112.355850][ T7473] __vm_munmap+0x14f/0x340 [ 112.357013][ T7473] __ia32_sys_munmap+0x57/0x80 [ 112.358264][ T7473] __do_fast_syscall_32+0x73/0x120 [ 112.359589][ T7473] do_fast_syscall_32+0x32/0x80 [ 112.360848][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.362484][ T7473] [ 112.363111][ T7473] Memory state around the buggy address: [ 112.364549][ T7473] ffff8880509a9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.366614][ T7473] ffff8880509a9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.368668][ T7473] >ffff8880509a9300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.370730][ T7473] ^ [ 112.371844][ T7473] ffff8880509a9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.373897][ T7473] ffff8880509a9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.375975][ T7473] ================================================================== [ 112.379288][ T7473] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.381157][ T7473] CPU: 3 UID: 0 PID: 7473 Comm: kbnepd bnep0 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 112.383837][ T7473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.386589][ T7473] Call Trace: [ 112.387460][ T7473] [ 112.388232][ T7473] dump_stack_lvl+0x3d/0x1f0 [ 112.389440][ T7473] panic+0x71d/0x800 [ 112.390471][ T7473] ? __pfx_panic+0x10/0x10 [ 112.391643][ T7473] ? preempt_schedule_thunk+0x1a/0x30 [ 112.393043][ T7473] ? preempt_schedule_common+0x44/0xc0 [ 112.394461][ T7473] ? check_panic_on_warn+0x1f/0xb0 [ 112.395791][ T7473] check_panic_on_warn+0xab/0xb0 [ 112.397091][ T7473] end_report+0x117/0x180 [ 112.398223][ T7473] kasan_report+0xe9/0x110 [ 112.399379][ T7473] ? device_for_each_child+0x18f/0x1a0 [ 112.400785][ T7473] ? device_for_each_child+0x18f/0x1a0 [ 112.402196][ T7473] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 112.403603][ T7473] device_for_each_child+0x18f/0x1a0 [ 112.404974][ T7473] ? __pfx_device_for_each_child+0x10/0x10 [ 112.406488][ T7473] pm_runtime_set_memalloc_noio+0xf2/0x180 [ 112.407988][ T7473] netdev_unregister_kobject+0x1ed/0x270 [ 112.409438][ T7473] unregister_netdevice_many_notify+0x1055/0x1e50 [ 112.411093][ T7473] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 112.412839][ T7473] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.414190][ T7473] ? unregister_netdev+0x12/0x30 [ 112.415473][ T7473] ? __pfx___mutex_lock+0x10/0x10 [ 112.416783][ T7473] unregister_netdevice_queue+0x307/0x3f0 [ 112.418262][ T7473] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 112.419881][ T7473] ? down_write+0x14e/0x200 [ 112.421070][ T7473] ? __pfx_down_write+0x10/0x10 [ 112.422353][ T7473] unregister_netdev+0x1c/0x30 [ 112.423594][ T7473] bnep_session+0x1f95/0x2a50 [ 112.424819][ T7473] ? lock_acquire.part.0+0x11b/0x380 [ 112.426203][ T7473] ? find_held_lock+0x2d/0x110 [ 112.427447][ T7473] ? __pfx_bnep_session+0x10/0x10 [ 112.428756][ T7473] ? __kthread_parkme+0xb7/0x220 [ 112.430045][ T7473] ? __pfx_lock_release+0x10/0x10 [ 112.431361][ T7473] ? __pfx_woken_wake_function+0x10/0x10 [ 112.432824][ T7473] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.434347][ T7473] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.435699][ T7473] ? __kthread_parkme+0x148/0x220 [ 112.436985][ T7473] ? __pfx_bnep_session+0x10/0x10 [ 112.438304][ T7473] kthread+0x2c1/0x3a0 [ 112.439368][ T7473] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.440727][ T7473] ? __pfx_kthread+0x10/0x10 [ 112.441934][ T7473] ret_from_fork+0x45/0x80 [ 112.443108][ T7473] ? __pfx_kthread+0x10/0x10 [ 112.444323][ T7473] ret_from_fork_asm+0x1a/0x30 [ 112.445577][ T7473] [ 112.446950][ T7473] Kernel Offset: disabled [ 112.448088][ T7473] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:50:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000002 RBX=0000000000000000 RCX=1ffffffff203b061 RDX=1ffff11004475a67 RSI=ffffffff8b4cd620 RDI=ffffffff8bb164e0 RBP=fec34dab7fe74f57 RSP=ffffc90002e4f9e8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff901dc557 R11=0000000000000005 R12=ffff88804a2452d0 R13=0000000000000010 R14=ffff88804a245328 R15=000000000000001c RIP=ffffffff8b19554d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ca98dc500 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ca9aad2a9 CR3=000000005a316000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000041 Opmask01=0000000000000000 Opmask02=00000000b7bffffb Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0202020202020202 0202020202020202 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2028282828282828 2820202018201818 2018181818181810 20003b7c2629280a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2022222222222222 2220202012201212 2012121212121210 2000317626232200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000001a88016879 RBX=ffffffff9331d040 RCX=00000000053c965f RDX=000000000000001a RSI=0000000000000001 RDI=ffffffff9331d040 RBP=00000000c4ebd7a4 RSP=ffffc90002e9eb08 R8 =0000000000000000 R9 =fffffbfff2d36f9a R10=ffffffff969b7cd7 R11=0000000000000002 R12=0000000000000004 R13=0000000000000000 R14=ffffffff8dca7460 R15=ffff888022d4a000 RIP=ffffffff8b1936d5 RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007facaa1e7ff8 CR3=000000005dd60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000021 RCX=ffffffff81698bde RDX=fffffbfff2d36f99 RSI=0000000000000008 RDI=ffffffff969b7cc0 RBP=dffffc0000000000 RSP=ffffc900036ef5d0 R8 =0000000000000000 R9 =fffffbfff2d36f98 R10=ffffffff969b7cc7 R11=0000000000000003 R12=ffffed100486515b R13=ffff888024328000 R14=0000000000000004 R15=0000000000000001 RIP=ffffffff81698be6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73ddff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8506cf05 RDI=ffffffff9a667b20 RBP=ffffffff9a667ae0 RSP=ffffc90002edf358 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000036 R14=ffffffff8506cea0 R15=0000000000000000 RIP=ffffffff8506cf2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c36e06b CR3=00000000754bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000