last executing test programs:
52.154755848s ago: executing program 2 (id=2904):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c000600010000000100000010012f800800010000000000f0000380080001000300000008000400090000005c0003800c000400000000000000000008000200010000000c0004000203aaaaaaaaaaaa06000300feff000006000100ffff000006000100ffff000008000200010000000800020001000000060003000000000006000100010000006800038008000200020000000c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c000400001700000000000008000200020000000c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa080002000300ff0000050002000000000005000200000000000500020000000000140003800500020000000000080001008100"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
41.937426244s ago: executing program 2 (id=2904):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c000600010000000100000010012f800800010000000000f0000380080001000300000008000400090000005c0003800c000400000000000000000008000200010000000c0004000203aaaaaaaaaaaa06000300feff000006000100ffff000006000100ffff000008000200010000000800020001000000060003000000000006000100010000006800038008000200020000000c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c000400001700000000000008000200020000000c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa080002000300ff0000050002000000000005000200000000000500020000000000140003800500020000000000080001008100"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
31.547419355s ago: executing program 2 (id=2904):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c000600010000000100000010012f800800010000000000f0000380080001000300000008000400090000005c0003800c000400000000000000000008000200010000000c0004000203aaaaaaaaaaaa06000300feff000006000100ffff000006000100ffff000008000200010000000800020001000000060003000000000006000100010000006800038008000200020000000c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c000400001700000000000008000200020000000c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa080002000300ff0000050002000000000005000200000000000500020000000000140003800500020000000000080001008100"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
21.379045199s ago: executing program 2 (id=2904):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c000600010000000100000010012f800800010000000000f0000380080001000300000008000400090000005c0003800c000400000000000000000008000200010000000c0004000203aaaaaaaaaaaa06000300feff000006000100ffff000006000100ffff000008000200010000000800020001000000060003000000000006000100010000006800038008000200020000000c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c000400001700000000000008000200020000000c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa080002000300ff0000050002000000000005000200000000000500020000000000140003800500020000000000080001008100"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
11.719234959s ago: executing program 2 (id=2904):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
4.57869146s ago: executing program 3 (id=3268):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c)
r4 = getpid()
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35)
sched_setscheduler(0x0, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0)
3.979953216s ago: executing program 0 (id=3271):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13, @ANYBLOB="18003080140003"], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
3.845233832s ago: executing program 1 (id=3272):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000002080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='P', 0x1}])
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0x541b, 0x0)
syz_usbip_server_init(0x5)
r4 = syz_usbip_server_init(0x2)
write$usbip_server(r4, &(0x7f0000000600)=ANY=[], 0xf1d)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0)
ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791203000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
fgetxattr(r7, &(0x7f0000000040)=@random={'osx.', '&(+[{$[!],}\'\\^\'.\x00\xfb\x95l\x96R1\xa9\xa02u|\x940[je\xd5\xa2\v>\xc6\x99\x82\xf6\xf9\xc9\v\xaa\'\x0f\xd3U\x13-\x1d\x1f\xd2'}, &(0x7f00000001c0)=""/239, 0xef)
syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffd, 0x86000)
recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0)
3.681551952s ago: executing program 0 (id=3273):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf, 0xfffffff8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
3.635320113s ago: executing program 3 (id=3274):
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
syz_emit_vhci(0x0, 0x21)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000000)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x0, 0x30}, &(0x7f0000000a80)=0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
socket$alg(0x26, 0x5, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x10, @desc1})
write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x67, 0x1, {0x2a9309cb0f7786c8, 0x1}}, 0x14)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1b, 0x1b, 0x100, &(0x7f00000000c0)="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"})
3.557452453s ago: executing program 0 (id=3275):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x4e23, @multicast2}}}, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0), 0x10)
mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0)
r2 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xd, 0x0, 0xc}}, {0x4}}]}, @TCA_STAB={0x4}]}, 0x6c}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf25010000000000000007410000006300180000000462726f6164636173742d6c696e6b0000000000000000000000000000100000000000000000000000f7aa04b01fe5000000000000000000000500"/98], 0x68}}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpeername(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001300)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x4a}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35}, {0x16}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf, 0xfffffff8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
3.007284095s ago: executing program 1 (id=3276):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c)
r4 = getpid()
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35)
sched_setscheduler(0x0, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0)
2.658784364s ago: executing program 0 (id=3277):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
syz_emit_ethernet(0x1c6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd69922ff50190210000000000000000000000fffffffffffffe8000000000000000000000000000aa0000000064afd900"], 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$vmci(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000380)={@local})
r2 = gettid()
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='subflow_check_data_avail\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r3, 0x0, 0x12, &(0x7f0000000180)='/dev/input/event#\x00'}, 0x30)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "7f0e279d2e5cf55a61c5c40d6e76943e0347c7cbf6336e676a359b970be7f3f3"})
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
sendfile(r6, r5, 0x0, 0xfff)
2.578630753s ago: executing program 0 (id=3278):
prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x0, 0x0, 0x4}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='sched_migrate_task\x00'}, 0x76)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x14004080}, 0x80)
readv(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00'}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
2.4194318s ago: executing program 3 (id=3279):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r1 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1)
2.029771442s ago: executing program 1 (id=3280):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c000600010000000100000010012f800800010000000000f0000380080001000300000008000400090000005c0003800c000400000000000000000008000200010000000c0004000203aaaaaaaaaaaa06000300feff000006000100ffff000006000100ffff000008000200010000000800020001000000060003000000000006000100010000006800038008000200020000000c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c000400001700000000000008000200020000000c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa080002000300ff0000050002000000000005000200000000000500020000000000140003800500020000000000080001008100"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13, @ANYBLOB="18003080140003"], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
1.829795406s ago: executing program 1 (id=3281):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$getown(r0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x5, 0x400, 0x9, 0x780, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000de6a0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket(0x28, 0x5, 0x0)
r5 = socket(0x15, 0x5, 0x1)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
fcntl$setstatus(r6, 0x4, 0x40c00)
read$FUSE(0xffffffffffffffff, &(0x7f00000080c0)={0x2020}, 0x2020)
1.638732129s ago: executing program 3 (id=3282):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13, @ANYBLOB="18003080140003"], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
1.385187875s ago: executing program 3 (id=3283):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={<r1=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x4, 0x2, 0x9, 0x6c85, 0x9}, &(0x7f00000003c0)=0x98)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r1, 0xe}, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000126000/0x2000)=nil, 0x2000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="d8bb038f81fe846833559483561eab7f2e02d2e71fd3add13ba9a788d56137b79a0b01abc9ec34f11e80107a41a4607460051a6b9dfa68e5617d4f3742a43c0d58403ace3ca640baf0659c47b59e6950", 0x50}, {&(0x7f00000000c0)="56cc4fd2c67539f23cf34603c8f2a13ea1e9f926d1757179b026bb8e2d0c06393f1a9a9dc19cd087c6db3882bba15cde7f73a7cc97f54faf980f99743337d496f2ca91979ec1d132c8d7002baaf17c0afc52e5e95300457d969eefcd70b98e9d79c7c22b96b1ead5a71b9b1cbddf13c0aa8749027c5a5e3cf3d5f33d4cd7caf69fa812e556883687488348f067dabce17689", 0x92}, {&(0x7f0000000180)="a7ebbcce3fd10c78fc83271444ab674c6a69bf04280b5e7efd3b9b940c001f45a512082dc262a3b5275219f4e7f80f7193a20e45c7b2011aa171eebd6c774e1084b589e61f787d23c64911b2fa7e0b9727a001e39c03ef2aa52dbbf604124fc50d03423c5690382382df1232375f16d09286205ba99456df2934c8594acf286759bb72a348703be6e748ff230984c624698437c14d1799793cc078c239ee4a8c6358da58251b0a49edc7d8bd528d6d586914dcbd0ac8b21117c693bd8f1feac88f3f5ac68bce37e9e75c1bf16a5afd8aa27cd9f3dcd8cddd7676c231f51f49", 0xdf}], 0x3}, 0x10004080)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000440), 0x200000, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x20074b1, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "32f49e45aa030ede", "2319ff0a8d16c3e350730988a76caae5", "939434aa", "271f1e5d8adee054"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4)
sendto$inet6(r2, &(0x7f0000000500)="d1391b80a3cd6132792e4a21f40b430e", 0xfffffffffffffede, 0x8000, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
1.119866997s ago: executing program 1 (id=3284):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000002080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='P', 0x1}])
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0x541b, 0x0)
syz_usbip_server_init(0x5)
r4 = syz_usbip_server_init(0x2)
write$usbip_server(r4, &(0x7f0000000600)=ANY=[], 0xf1d)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0)
ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791203000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
fgetxattr(r7, &(0x7f0000000040)=@random={'osx.', '&(+[{$[!],}\'\\^\'.\x00\xfb\x95l\x96R1\xa9\xa02u|\x940[je\xd5\xa2\v>\xc6\x99\x82\xf6\xf9\xc9\v\xaa\'\x0f\xd3U\x13-\x1d\x1f\xd2'}, &(0x7f00000001c0)=""/239, 0xef)
syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffd, 0x86000)
recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0)
1.044386102s ago: executing program 2 (id=2904):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x80000, 0xfffffffe)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855)
r14 = socket$netlink(0x10, 0x3, 0x0)
writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r15 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c)
sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000)
writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc)
1.06237ms ago: executing program 0 (id=3285):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$getown(r0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x5, 0x400, 0x9, 0x780, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000de6a0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket(0x28, 0x5, 0x0)
r5 = socket(0x15, 0x5, 0x1)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
r7 = dup2(r6, r6)
read$FUSE(r7, &(0x7f00000080c0)={0x2020}, 0x2020)
259.882µs ago: executing program 1 (id=3286):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)
readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
0s ago: executing program 3 (id=3287):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x0, 0x36fc3a0033702d2a, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}})
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x9}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000004a00010000000000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="023572b459430e07"], 0x24}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0)
ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000040)="cd5eda934a41f56269fa92d608a92020cfc1e456d3a30755d9810ea2925c8e361b534ca50c8e17e1f998f9d12ccb123e7a4924817dc1bb36229290bcec48c9398956f6bcccdac248e41d424a20d5aad072d046f666bbeab753b222c808430d0d592a12c85c0b65939302e7f8f9ff7eda9b1c4f7ddb0fb7b009772ffaf62b7f8b00ee4696de01a384b78b219c53374cf7044942235ea45d2855fc84959bd8f8a159752125098686945e59f080aa153763e23bdfbf99d734b131b83c692745623dfd22666eaed334dc8dc979dac3acbf6614754cc931a613adff338c36e464314473")
kernel console output (not intermixed with test programs):
ce attached
[ 611.127614][T14880] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 611.132366][T16845] usbip_core: unknown command
[ 611.139328][T16845] vhci_hcd: unknown pdu 0
[ 611.141383][T16845] usbip_core: unknown command
[ 611.144423][T16842] vhci_hcd: connection closed
[ 611.145916][ T64] vhci_hcd: stop threads
[ 611.149536][ T64] vhci_hcd: release socket
[ 611.151346][ T64] vhci_hcd: disconnect device
[ 611.153380][ T64] vhci_hcd: stop threads
[ 611.156347][ T64] vhci_hcd: release socket
[ 611.158107][ T64] vhci_hcd: disconnect device
[ 611.165439][T14880] bridge0: port 2(bridge_slave_1) entered blocking state
[ 611.168353][T14880] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 611.196968][T16680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 611.239120][T16850] virtio-fs: tag <(null)> not found
[ 611.248338][T16850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[ 611.251128][T16850] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 611.256998][T16850] vhci_hcd vhci_hcd.0: Device attached
[ 611.274555][T16851] vhci_hcd: connection closed
[ 611.274805][ T1130] vhci_hcd: stop threads
[ 611.278714][ T1130] vhci_hcd: release socket
[ 611.280555][ T1130] vhci_hcd: disconnect device
[ 611.366434][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 611.410489][T16680] veth0_vlan: entered promiscuous mode
[ 611.421607][T16680] veth1_vlan: entered promiscuous mode
[ 611.449056][T16680] veth0_macvtap: entered promiscuous mode
[ 611.454865][T16680] veth1_macvtap: entered promiscuous mode
[ 611.470981][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 611.476066][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.480239][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 611.484896][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.489174][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 611.493633][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.498021][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 611.502537][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.508065][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 611.517521][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 611.521968][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.526740][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 611.531107][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.535357][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 611.539330][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.543071][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 611.547342][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 611.552968][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 611.561203][T16680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 611.565240][T16680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 611.569151][T16680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 611.573085][T16680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 611.620861][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 611.624402][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 611.646013][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 611.649067][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 611.774396][T16858] FAULT_INJECTION: forcing a failure.
[ 611.774396][T16858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 611.779681][T16858] CPU: 0 PID: 16858 Comm: syz.0.3011 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 611.783469][T16858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 611.787624][T16858] Call Trace:
[ 611.788955][T16858] <TASK>
[ 611.790120][T16858] dump_stack_lvl+0x16c/0x1f0
[ 611.792045][T16858] should_fail_ex+0x497/0x5b0
[ 611.793900][T16858] _copy_from_iter+0x27a/0xfb0
[ 611.795795][T16858] ? __alloc_skb+0x200/0x380
[ 611.797628][T16858] ? __pfx__copy_from_iter+0x10/0x10
[ 611.799691][T16858] ? __virt_addr_valid+0x5e/0x590
[ 611.801653][T16858] ? __phys_addr_symbol+0x30/0x80
[ 611.803625][T16858] ? __check_object_size+0x48e/0x720
[ 611.805899][T16858] netlink_sendmsg+0x813/0xd70
[ 611.807804][T16858] ? __pfx_netlink_sendmsg+0x10/0x10
[ 611.809891][T16858] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 611.811969][T16858] ____sys_sendmsg+0x9b4/0xb50
[ 611.813844][T16858] ? __pfx_____sys_sendmsg+0x10/0x10
[ 611.816009][T16858] ? get_compat_msghdr+0x11b/0x170
[ 611.818014][T16858] ? __pfx___lock_acquire+0x10/0x10
[ 611.820071][T16858] ___sys_sendmsg+0x135/0x1e0
[ 611.821906][T16858] ? __pfx____sys_sendmsg+0x10/0x10
[ 611.823945][T16858] ? ksys_write+0x21c/0x260
[ 611.825745][T16858] ? __fget_light+0x173/0x210
[ 611.827594][T16858] __sys_sendmsg+0x117/0x1f0
[ 611.829403][T16858] ? __pfx___sys_sendmsg+0x10/0x10
[ 611.831420][T16858] __do_fast_syscall_32+0x73/0x120
[ 611.833406][T16858] do_fast_syscall_32+0x32/0x80
[ 611.835311][T16858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 611.837768][T16858] RIP: 0023:0xf7f26579
[ 611.839373][T16858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 611.846795][T16858] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[ 611.850039][T16858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180
[ 611.853087][T16858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 611.856128][T16858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 611.859164][T16858] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 611.862132][T16858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 611.865020][T16858] </TASK>
[ 611.866386][ C0] vkms_vblank_simulate: vblank timer overrun
[ 611.965962][T16871] MTD: Couldn't look up '/dev/sg0': -15
[ 612.021521][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.029723][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.033158][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.037339][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.041211][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.045799][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.049803][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.053707][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.056977][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3018'.
[ 612.057755][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[ 612.104352][T12772] Bluetooth: hci4: command 0x0406 tx timeout
[ 612.117564][T16877] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[ 612.120320][T16877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 612.123858][T16877] vhci_hcd vhci_hcd.0: Device attached
[ 612.133229][T16878] vhci_hcd: connection closed
[ 612.133542][ T1086] vhci_hcd: stop threads
[ 612.139722][ T1086] vhci_hcd: release socket
[ 612.141740][ T1086] vhci_hcd: disconnect device
[ 612.370233][T16885] FAULT_INJECTION: forcing a failure.
[ 612.370233][T16885] name failslab, interval 1, probability 0, space 0, times 0
[ 612.376066][T16885] CPU: 0 PID: 16885 Comm: syz.0.3020 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 612.380322][T16885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 612.384128][T16885] Call Trace:
[ 612.385334][T16885] <TASK>
[ 612.386430][T16885] dump_stack_lvl+0x16c/0x1f0
[ 612.388130][T16885] should_fail_ex+0x497/0x5b0
[ 612.390100][T16885] should_failslab+0x9/0x20
[ 612.391942][T16885] kmem_cache_alloc_noprof+0x6e/0x2f0
[ 612.394223][T16885] ? getname_kernel+0x52/0x370
[ 612.396326][T16885] getname_kernel+0x52/0x370
[ 612.398400][T16885] kern_path+0x1d/0x50
[ 612.400184][T16885] lookup_bdev+0xd9/0x280
[ 612.402023][T16885] ? __pfx_lookup_bdev+0x10/0x10
[ 612.404163][T16885] get_tree_bdev+0xbd/0x610
[ 612.406091][T16885] ? __pfx_ext4_fill_super+0x10/0x10
[ 612.408375][T16885] ? __pfx_get_tree_bdev+0x10/0x10
[ 612.410368][T16885] ? bpf_lsm_capable+0x9/0x10
[ 612.411966][T16885] ? security_capable+0x98/0xd0
[ 612.413988][T16885] vfs_get_tree+0x8f/0x380
[ 612.416030][T16885] path_mount+0x6e1/0x1f10
[ 612.417966][T16885] ? __pfx_path_mount+0x10/0x10
[ 612.420069][T16885] ? putname+0x12e/0x170
[ 612.421836][T16885] ? putname+0x12e/0x170
[ 612.423476][T16885] __ia32_sys_mount+0x292/0x310
[ 612.425480][T16885] ? __pfx___ia32_sys_mount+0x10/0x10
[ 612.427522][T16885] __do_fast_syscall_32+0x73/0x120
[ 612.429153][T16885] do_fast_syscall_32+0x32/0x80
[ 612.430838][T16885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 612.433256][T16885] RIP: 0023:0xf7f26579
[ 612.434741][T16885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 612.441880][T16885] RSP: 002b:00000000f5cb556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[ 612.444749][T16885] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000020000080
[ 612.448436][T16885] RDX: 0000000020000200 RSI: 0000000000000003 RDI: 0000000000000000
[ 612.451801][T16885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 612.454589][T16885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 612.457241][T16885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 612.460266][T16885] </TASK>
[ 612.461669][ C0] vkms_vblank_simulate: vblank timer overrun
[ 612.472340][T16885] /dev/sr0: Can't lookup blockdev
[ 612.914986][ T39] audit: type=1326 audit(1721575099.848:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.923277][ T39] audit: type=1326 audit(1721575099.848:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.933296][ T39] audit: type=1326 audit(1721575099.848:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.943095][ T39] audit: type=1326 audit(1721575099.848:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.952649][ T39] audit: type=1326 audit(1721575099.848:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.962585][ T39] audit: type=1326 audit(1721575099.848:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.976344][ T39] audit: type=1326 audit(1721575099.848:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 612.991263][ T39] audit: type=1326 audit(1721575099.848:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 613.004236][ T39] audit: type=1326 audit(1721575099.848:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 613.294658][ T5229] Bluetooth: hci0: command 0x0406 tx timeout
[ 614.024796][T16924] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 614.149994][ T39] kauditd_printk_skb: 10 callbacks suppressed
[ 614.150010][ T39] audit: type=1326 audit(1721575101.078:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16923 comm="syz.1.3030" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0
[ 614.309129][T16936] FAULT_INJECTION: forcing a failure.
[ 614.309129][T16936] name failslab, interval 1, probability 0, space 0, times 0
[ 614.314741][T16936] CPU: 0 PID: 16936 Comm: syz.0.3033 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 614.318963][T16936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 614.323588][T16936] Call Trace:
[ 614.325268][T16936] <TASK>
[ 614.326672][T16936] dump_stack_lvl+0x16c/0x1f0
[ 614.328613][T16936] should_fail_ex+0x497/0x5b0
[ 614.330637][T16936] should_failslab+0x9/0x20
[ 614.332282][T16936] __kmalloc_noprof+0xcb/0x410
[ 614.334214][T16936] ? kasan_quarantine_put+0x10a/0x240
[ 614.336542][T16936] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[ 614.339552][T16936] genl_family_rcv_msg_doit+0xbf/0x2f0
[ 614.341772][T16936] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 614.344134][T16936] ? ns_capable+0xd7/0x110
[ 614.345671][T16936] genl_rcv_msg+0x565/0x800
[ 614.347329][T16936] ? __pfx_genl_rcv_msg+0x10/0x10
[ 614.349505][T16936] ? __pfx_ovs_vport_cmd_set+0x10/0x10
[ 614.351845][T16936] netlink_rcv_skb+0x165/0x410
[ 614.353718][T16936] ? __pfx_genl_rcv_msg+0x10/0x10
[ 614.355766][T16936] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 614.358031][T16936] ? down_read+0xc9/0x330
[ 614.359592][T16936] ? __pfx_down_read+0x10/0x10
[ 614.361318][T16936] ? netlink_deliver_tap+0x1ae/0xcf0
[ 614.363512][T16936] genl_rcv+0x28/0x40
[ 614.365127][T16936] netlink_unicast+0x544/0x830
[ 614.366639][T16936] ? __pfx_netlink_unicast+0x10/0x10
[ 614.368595][T16936] ? __phys_addr_symbol+0x30/0x80
[ 614.370581][T16936] ? __check_object_size+0x48e/0x720
[ 614.372425][T16936] netlink_sendmsg+0x8b8/0xd70
[ 614.374107][T16936] ? __pfx_netlink_sendmsg+0x10/0x10
[ 614.376290][T16936] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 614.378416][T16936] ____sys_sendmsg+0x9b4/0xb50
[ 614.380396][T16936] ? __pfx_____sys_sendmsg+0x10/0x10
[ 614.382410][T16936] ? get_compat_msghdr+0x11b/0x170
[ 614.384638][T16936] ? __pfx___lock_acquire+0x10/0x10
[ 614.386711][T16936] ___sys_sendmsg+0x135/0x1e0
[ 614.388620][T16936] ? __pfx____sys_sendmsg+0x10/0x10
[ 614.390309][T16936] ? ksys_write+0x21c/0x260
[ 614.392071][T16936] ? __fget_light+0x173/0x210
[ 614.393803][T16936] __sys_sendmsg+0x117/0x1f0
[ 614.395818][T16936] ? __pfx___sys_sendmsg+0x10/0x10
[ 614.398204][T16936] __do_fast_syscall_32+0x73/0x120
[ 614.400418][T16936] do_fast_syscall_32+0x32/0x80
[ 614.402590][T16936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 614.405416][T16936] RIP: 0023:0xf7f26579
[ 614.407050][T16936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 614.413641][T16936] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[ 614.418950][T16936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000100
[ 614.421872][T16936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 614.424938][T16936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 614.427791][T16936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 614.431119][T16936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 614.433939][T16936] </TASK>
[ 614.435307][ C0] vkms_vblank_simulate: vblank timer overrun
[ 614.971159][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 615.029534][ T39] audit: type=1326 audit(1721575101.958:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 615.038747][ T39] audit: type=1326 audit(1721575101.958:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 615.048338][ T39] audit: type=1326 audit(1721575101.968:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 615.062453][ T39] audit: type=1326 audit(1721575101.968:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 615.071303][ T39] audit: type=1326 audit(1721575101.968:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000
[ 615.151597][T12740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 615.157898][T12740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 615.161621][T12740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 615.165148][T12740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 615.168780][T12740] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 615.171730][T12740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 615.451999][T16951] chnl_net:caif_netlink_parms(): no params data found
[ 615.665761][T16951] bridge0: port 1(bridge_slave_0) entered blocking state
[ 615.668926][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 615.671984][T16951] bridge_slave_0: entered allmulticast mode
[ 615.676087][T16951] bridge_slave_0: entered promiscuous mode
[ 615.680940][T16951] bridge0: port 2(bridge_slave_1) entered blocking state
[ 615.684093][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 615.687291][T16951] bridge_slave_1: entered allmulticast mode
[ 615.691025][T16951] bridge_slave_1: entered promiscuous mode
[ 615.752367][T16951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 615.760641][T16951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 615.828910][T16951] team0: Port device team_slave_0 added
[ 615.837025][T16951] team0: Port device team_slave_1 added
[ 615.887874][T16951] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 615.890316][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 615.900595][T16951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 615.906641][T16951] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 615.909577][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 615.920383][T16951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 615.983671][T16951] hsr_slave_0: entered promiscuous mode
[ 615.991685][T16951] hsr_slave_1: entered promiscuous mode
[ 615.994333][T16951] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 615.997262][T16951] Cannot create hsr debugfs directory
[ 616.214379][T16972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 616.216769][T16972] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 616.220077][T16972] vhci_hcd vhci_hcd.0: Device attached
[ 616.225408][T16973] vhci_hcd: connection closed
[ 616.225649][T12815] vhci_hcd: stop threads
[ 616.229764][T12815] vhci_hcd: release socket
[ 616.231800][T12815] vhci_hcd: disconnect device
[ 616.356890][T16977] libceph: resolve '.
[ 616.356890][T16977] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 616.356890][T16977] ' (ret=-3): failed
[ 616.999137][T16985] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 617.142593][ T39] audit: type=1326 audit(1721575104.068:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.3.3045" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0
[ 617.224370][T12740] Bluetooth: hci1: command tx timeout
[ 617.426152][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 617.513940][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 617.518604][T16990] MTD: Couldn't look up '/dev/sg0': -15
[ 617.569114][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 617.718132][T16994] dccp_close: ABORT with 32 bytes unread
[ 617.731639][T16994] 9pnet_fd: Insufficient options for proto=fd
[ 617.747594][ T1086] bridge_slave_1: left allmulticast mode
[ 617.750066][ T1086] bridge_slave_1: left promiscuous mode
[ 617.752810][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[ 617.759494][ T1086] bridge_slave_0: left allmulticast mode
[ 617.762030][ T1086] bridge_slave_0: left promiscuous mode
[ 617.775404][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 617.986185][T17007] __nla_validate_parse: 30 callbacks suppressed
[ 617.986207][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'.
[ 618.235417][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 618.241310][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 618.249896][ T1086] bond0 (unregistering): Released all slaves
[ 618.277227][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3052'.
[ 618.290969][T17013] netlink: 'syz.3.3052': attribute type 4 has an invalid length.
[ 618.301231][T17010] netlink: 'syz.3.3052': attribute type 4 has an invalid length.
[ 618.366826][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'.
[ 618.387995][T17015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3053'.
[ 618.476841][T17018] netlink: 'syz.3.3053': attribute type 4 has an invalid length.
[ 618.525871][T17015] netlink: 'syz.3.3053': attribute type 4 has an invalid length.
[ 618.721380][ T1086] hsr_slave_0: left promiscuous mode
[ 618.723793][T17024] libceph: resolve '.
[ 618.723793][T17024] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 618.723793][T17024] ' (ret=-3): failed
[ 618.731864][ T1086] hsr_slave_1: left promiscuous mode
[ 618.766905][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 618.770415][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 618.775797][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 618.779225][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 618.883640][ T1086] veth1_macvtap: left promiscuous mode
[ 618.886233][ T1086] veth0_macvtap: left promiscuous mode
[ 618.889047][ T1086] veth1_vlan: left promiscuous mode
[ 618.890946][ T1086] veth0_vlan: left promiscuous mode
[ 619.294479][T12740] Bluetooth: hci1: command tx timeout
[ 620.342450][ T1086] team0 (unregistering): Port device team_slave_1 removed
[ 620.460325][ T1086] team0 (unregistering): Port device team_slave_0 removed
[ 620.812096][T17039] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[ 620.815628][T17040] MTD: Couldn't look up '/dev/sg0': -15
[ 621.301539][T16951] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 621.309169][T16951] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 621.317614][T16951] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 621.323771][T16951] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 621.384395][T12740] Bluetooth: hci1: command tx timeout
[ 621.386190][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'.
[ 621.400008][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3061'.
[ 621.461634][T16951] 8021q: adding VLAN 0 to HW filter on device bond0
[ 621.466333][T17047] netlink: 'syz.1.3061': attribute type 4 has an invalid length.
[ 621.483773][T17042] netlink: 'syz.1.3061': attribute type 4 has an invalid length.
[ 621.496710][T16951] 8021q: adding VLAN 0 to HW filter on device team0
[ 621.512236][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state
[ 621.515535][ T5540] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 621.532513][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state
[ 621.535654][ T5540] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 621.569596][T16951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 621.614308][ T5261] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 621.705679][T16951] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 621.724236][T14880] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 621.743306][T16951] veth0_vlan: entered promiscuous mode
[ 621.752338][T16951] veth1_vlan: entered promiscuous mode
[ 621.775517][T16951] veth0_macvtap: entered promiscuous mode
[ 621.781421][T16951] veth1_macvtap: entered promiscuous mode
[ 621.794893][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 621.799160][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.803142][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 621.804963][ T5261] usb 8-1: Using ep0 maxpacket: 32
[ 621.807778][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.813458][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 621.814647][ T5261] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 621.817755][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.825679][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 621.827810][ T5261] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 621.829871][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.831420][T16951] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 621.839049][ T5261] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 621.847239][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 621.851036][ T5261] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 621.851587][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.859277][ T5261] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 621.859923][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 621.867988][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.870321][ T5261] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 621.871929][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 621.871942][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.882609][T14880] usb 5-1: device descriptor read/64, error -71
[ 621.885729][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 621.887403][ T5261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 621.891392][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 621.892857][T16951] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 621.895221][ T5261] usb 8-1: Product: syz
[ 621.901875][T16951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 621.903868][ T5261] usb 8-1: Manufacturer: syz
[ 621.907668][T16951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 621.910094][ T5261] usb 8-1: SerialNumber: syz
[ 621.912922][T16951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 621.918547][T16951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 622.023951][T12815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 622.030825][T12815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 622.046707][T12815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 622.050017][T12815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 622.127986][ T5261] cdc_ncm 8-1:1.0: bind() failure
[ 622.133118][ T5261] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[ 622.136677][ T5261] cdc_ncm 8-1:1.1: bind() failure
[ 622.141938][ T5261] usb 8-1: USB disconnect, device number 9
[ 622.148383][T14967] udevd[14967]: setting mode of /dev/bus/usb/008/009 to 020664 failed: No such file or directory
[ 622.152773][T14967] udevd[14967]: setting owner of /dev/bus/usb/008/009 to uid=0, gid=0 failed: No such file or directory
[ 622.196080][T14880] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 622.355968][T14880] usb 5-1: device descriptor read/64, error -71
[ 622.484878][T14880] usb usb5-port1: attempt power cycle
[ 622.502589][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3064'.
[ 622.680739][T17062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 622.683615][T17062] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 622.690165][T17062] vhci_hcd vhci_hcd.0: Device attached
[ 622.696843][T17062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 622.699426][T17062] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 622.702859][T17062] vhci_hcd vhci_hcd.0: Device attached
[ 622.706059][T17065] usbip_core: unknown command
[ 622.707701][T17065] vhci_hcd: unknown pdu 0
[ 622.709381][T17065] usbip_core: unknown command
[ 622.711476][T12815] vhci_hcd: stop threads
[ 622.713211][T12815] vhci_hcd: release socket
[ 622.714893][T12815] vhci_hcd: disconnect device
[ 622.717676][T17063] vhci_hcd: connection closed
[ 622.719252][T12815] vhci_hcd: stop threads
[ 622.722852][T12815] vhci_hcd: release socket
[ 622.725206][T12815] vhci_hcd: disconnect device
[ 622.904304][T14880] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 622.938562][T14880] usb 5-1: device descriptor read/8, error -71
[ 623.204712][T14880] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 623.234905][T14880] usb 5-1: device descriptor read/8, error -71
[ 623.356502][T14880] usb usb5-port1: unable to enumerate USB device
[ 624.032542][T17076] sctp: [Deprecated]: syz.3.3069 (pid 17076) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 624.032542][T17076] Use struct sctp_sack_info instead
[ 624.490622][T17080] MTD: Couldn't look up '/dev/sg0': -15
[ 624.495246][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'.
[ 624.508965][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3071'.
[ 624.562528][T17082] netlink: 'syz.0.3071': attribute type 4 has an invalid length.
[ 624.581114][T17082] netlink: 'syz.0.3071': attribute type 4 has an invalid length.
[ 624.666418][ T1355] ieee802154 phy0 wpan0: encryption failed: -22
[ 624.669500][ T1355] ieee802154 phy1 wpan1: encryption failed: -22
[ 625.429335][ T1130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 625.936612][T17096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 625.939442][T17096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 625.942895][T17096] vhci_hcd vhci_hcd.0: Device attached
[ 625.952253][T17096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 625.954853][T17096] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 625.960281][T17096] vhci_hcd vhci_hcd.0: Device attached
[ 625.965916][T17099] usbip_core: unknown command
[ 625.969871][T17099] vhci_hcd: unknown pdu 0
[ 625.971735][T17099] usbip_core: unknown command
[ 625.973939][ T13] vhci_hcd: stop threads
[ 625.976492][T17097] vhci_hcd: connection closed
[ 625.977373][ T13] vhci_hcd: release socket
[ 625.981898][ T13] vhci_hcd: disconnect device
[ 625.984815][ T13] vhci_hcd: stop threads
[ 625.987001][ T13] vhci_hcd: release socket
[ 625.989038][ T13] vhci_hcd: disconnect device
[ 626.030356][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 626.035606][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 626.039055][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 626.044740][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 626.048832][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 626.052023][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 626.203043][T17102] chnl_net:caif_netlink_parms(): no params data found
[ 626.355678][T17102] bridge0: port 1(bridge_slave_0) entered blocking state
[ 626.358934][T17102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 626.362121][T17102] bridge_slave_0: entered allmulticast mode
[ 626.366097][T17102] bridge_slave_0: entered promiscuous mode
[ 626.371152][T17102] bridge0: port 2(bridge_slave_1) entered blocking state
[ 626.380086][T17102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 626.383475][T17102] bridge_slave_1: entered allmulticast mode
[ 626.387577][T17102] bridge_slave_1: entered promiscuous mode
[ 626.478626][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 626.486826][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 626.547862][T17102] team0: Port device team_slave_0 added
[ 626.553804][T17102] team0: Port device team_slave_1 added
[ 626.632063][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 626.643052][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 626.655480][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 626.686617][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 626.689681][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 626.701531][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 626.765208][T17122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3078'.
[ 626.837193][T17102] hsr_slave_0: entered promiscuous mode
[ 626.840141][T17102] hsr_slave_1: entered promiscuous mode
[ 626.842880][T17102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 626.847509][T17102] Cannot create hsr debugfs directory
[ 627.022356][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'.
[ 627.080957][T17127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3080'.
[ 627.156880][T17127] netlink: 'syz.3.3080': attribute type 4 has an invalid length.
[ 627.171715][T17127] netlink: 'syz.3.3080': attribute type 4 has an invalid length.
[ 627.908537][ T1130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 628.071739][ T1130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 628.094560][T12740] Bluetooth: hci1: command tx timeout
[ 628.188705][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'.
[ 628.200641][ T1130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 628.204811][T17150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 628.326546][T17155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 628.358913][ T1130] bridge_slave_1: left allmulticast mode
[ 628.361423][ T1130] bridge_slave_1: left promiscuous mode
[ 628.363966][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 628.370202][ T1130] bridge_slave_0: left allmulticast mode
[ 628.372328][ T1130] bridge_slave_0: left promiscuous mode
[ 628.375452][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 628.474417][ T9951] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 628.658629][ T9951] usb 6-1: Using ep0 maxpacket: 32
[ 628.674034][ T9951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 628.692066][ T9951] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 628.696347][ T9951] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 628.700328][ T9951] usb 6-1: Product: syz
[ 628.702230][ T9951] usb 6-1: Manufacturer: syz
[ 628.704521][ T9951] usb 6-1: SerialNumber: syz
[ 628.709581][ T9951] usb 6-1: config 0 descriptor??
[ 628.713760][T17148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 628.741765][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 628.749282][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 628.754647][ T1130] bond0 (unregistering): Released all slaves
[ 628.934846][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 628.941134][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 628.953808][ T9951] usb 6-1: USB disconnect, device number 19
[ 629.103906][ T1130] hsr_slave_0: left promiscuous mode
[ 629.108687][ T1130] hsr_slave_1: left promiscuous mode
[ 629.111961][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 629.115243][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 629.118480][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 629.121499][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 629.175685][ T1130] veth1_macvtap: left promiscuous mode
[ 629.178169][ T1130] veth0_macvtap: left promiscuous mode
[ 629.180181][ T1130] veth1_vlan: left promiscuous mode
[ 629.182000][ T1130] veth0_vlan: left promiscuous mode
[ 629.604233][T17161] MTD: Couldn't look up '/dev/sg0': -15
[ 629.698809][T17165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3092'.
[ 630.224265][T12740] Bluetooth: hci1: command tx timeout
[ 630.518929][ T1130] team0 (unregistering): Port device team_slave_1 removed
[ 630.640947][ T1130] team0 (unregistering): Port device team_slave_0 removed
[ 631.623075][T17102] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 631.638866][T17102] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 631.650401][T17102] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 631.661673][T17102] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 631.787102][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3100'.
[ 631.808254][T17195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 631.817551][T17102] 8021q: adding VLAN 0 to HW filter on device bond0
[ 631.831640][T17102] 8021q: adding VLAN 0 to HW filter on device team0
[ 631.835980][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3102'.
[ 631.840249][T14973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 631.843065][T14973] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 631.855154][T14973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 631.857721][T14973] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 632.017642][T17202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 632.183876][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 632.246460][T17102] veth0_vlan: entered promiscuous mode
[ 632.264390][T12740] Bluetooth: hci1: command tx timeout
[ 632.267367][T17102] veth1_vlan: entered promiscuous mode
[ 632.331579][T17102] veth0_macvtap: entered promiscuous mode
[ 632.345456][T17102] veth1_macvtap: entered promiscuous mode
[ 632.372844][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 632.378856][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.383382][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 632.388031][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.393534][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 632.399682][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.404550][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 632.409387][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.421728][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 632.436250][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 632.440775][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.445872][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 632.451306][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.457948][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 632.463435][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.468092][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 632.473154][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 632.480945][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 632.492614][T17102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 632.501908][T17102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 632.506095][T17102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 632.509942][T17102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 632.591678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 632.603926][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 632.656423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 632.660033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 633.054225][ T5292] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 633.259158][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 633.263027][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 633.266405][ T5292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 633.278483][ T5292] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 633.282556][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 633.292336][ T5292] usb 5-1: config 0 descriptor??
[ 633.876736][ T5292] usbhid 5-1:0.0: can't add hid device: -71
[ 633.880994][ T5292] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 633.891383][ T5292] usb 5-1: USB disconnect, device number 24
[ 634.092034][T17218] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3107'.
[ 634.258761][T17224] netlink: 'syz.1.3109': attribute type 5 has an invalid length.
[ 634.587345][T17231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3111'.
[ 634.591872][T17229] syzkaller1: entered promiscuous mode
[ 634.594003][T17229] syzkaller1: entered allmulticast mode
[ 634.663648][T17233] syzkaller1: entered promiscuous mode
[ 634.665979][T17233] syzkaller1: entered allmulticast mode
[ 634.727158][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'.
[ 634.795441][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3115'.
[ 634.806917][T17237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3115'.
[ 634.882481][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3115'.
[ 634.892203][T17237] netlink: 'syz.0.3115': attribute type 4 has an invalid length.
[ 634.918478][T17237] netlink: 'syz.0.3115': attribute type 4 has an invalid length.
[ 635.515303][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'.
[ 635.541221][T17262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3123'.
[ 635.643845][ T1130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 635.658707][T17262] netlink: 'syz.0.3123': attribute type 4 has an invalid length.
[ 635.701843][T17262] netlink: 'syz.0.3123': attribute type 4 has an invalid length.
[ 636.288909][T17270] syzkaller1: entered promiscuous mode
[ 636.291429][T17270] syzkaller1: entered allmulticast mode
[ 636.405690][T12772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 636.413912][T12772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 636.419490][T12772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 636.429483][T12772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 636.433952][T12772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 636.439492][T12772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 636.439508][T17278] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 636.445008][T17278] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 636.496946][T17278] vhci_hcd vhci_hcd.0: Device attached
[ 636.499316][T17282] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[ 636.501710][T17282] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 636.510814][T17282] vhci_hcd vhci_hcd.0: Device attached
[ 636.520372][T17283] usbip_core: unknown command
[ 636.522580][T17283] vhci_hcd: unknown pdu 0
[ 636.524822][T17283] usbip_core: unknown command
[ 636.527315][ T78] vhci_hcd: stop threads
[ 636.528787][ T78] vhci_hcd: release socket
[ 636.530362][ T78] vhci_hcd: disconnect device
[ 636.547387][T17280] vhci_hcd: connection closed
[ 636.547927][ T78] vhci_hcd: stop threads
[ 636.551793][ T78] vhci_hcd: release socket
[ 636.553839][ T78] vhci_hcd: disconnect device
[ 636.586867][T17275] chnl_net:caif_netlink_parms(): no params data found
[ 636.679918][T17275] bridge0: port 1(bridge_slave_0) entered blocking state
[ 636.686001][T17275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 636.692709][T17275] bridge_slave_0: entered allmulticast mode
[ 636.698103][T17275] bridge_slave_0: entered promiscuous mode
[ 636.702981][T17275] bridge0: port 2(bridge_slave_1) entered blocking state
[ 636.710187][T17275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 636.713251][T17275] bridge_slave_1: entered allmulticast mode
[ 636.717150][T17275] bridge_slave_1: entered promiscuous mode
[ 636.772415][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 636.779655][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 636.837779][T17275] team0: Port device team_slave_0 added
[ 636.843003][T17275] team0: Port device team_slave_1 added
[ 636.889149][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 636.891614][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 636.908520][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 636.916310][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 636.920144][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 636.933969][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 636.984321][T12772] Bluetooth: hci0: command 0x0406 tx timeout
[ 637.007087][T17275] hsr_slave_0: entered promiscuous mode
[ 637.010459][T17275] hsr_slave_1: entered promiscuous mode
[ 637.013588][T17275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 637.018425][T17292] FAULT_INJECTION: forcing a failure.
[ 637.018425][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 637.019025][T17275] Cannot create hsr debugfs directory
[ 637.023203][T17292] CPU: 3 PID: 17292 Comm: syz.1.3128 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 637.023247][T17292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 637.033314][T17292] Call Trace:
[ 637.034650][T17292] <TASK>
[ 637.035914][T17292] dump_stack_lvl+0x16c/0x1f0
[ 637.037582][T17292] should_fail_ex+0x497/0x5b0
[ 637.039211][T17292] kvm_write_guest_offset_cached+0x1e5/0x4d0
[ 637.041270][T17292] kvm_lapic_sync_to_vapic+0x484/0x6c0
[ 637.043331][T17292] ? kvm_apic_accept_pic_intr+0xe8/0x1a0
[ 637.045833][T17292] ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10
[ 637.048533][T17292] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0
[ 637.051163][T17292] ? kvm_check_and_inject_events+0x646/0x1000
[ 637.053881][T17292] ? vmx_update_cr8_intercept+0xb9/0x240
[ 637.056410][T17292] vcpu_run+0xece/0x4cf0
[ 637.058301][T17292] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10
[ 637.060634][T17292] ? __pfx_vcpu_run+0x10/0x10
[ 637.062687][T17292] ? __pfx_lock_acquire+0x10/0x10
[ 637.064894][T17292] ? mark_held_locks+0x10/0xe0
[ 637.067031][T17292] ? fpu_swap_kvm_fpstate+0x1c8/0x420
[ 637.069055][T17292] ? __local_bh_enable_ip+0xa4/0x120
[ 637.071100][T17292] ? lockdep_hardirqs_on+0x7c/0x110
[ 637.073389][T17292] ? fpu_swap_kvm_fpstate+0x1c8/0x420
[ 637.075778][T17292] ? __local_bh_enable_ip+0xa4/0x120
[ 637.078141][T17292] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730
[ 637.080644][T17292] kvm_arch_vcpu_ioctl_run+0x447/0x1730
[ 637.083090][T17292] kvm_vcpu_ioctl+0x6cd/0x1520
[ 637.085166][T17292] ? tomoyo_path_number_perm+0x467/0x5b0
[ 637.087606][T17292] ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 637.089885][T17292] ? tomoyo_path_number_perm+0x190/0x5b0
[ 637.092317][T17292] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 637.094961][T17292] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 637.097580][T17292] ? do_vfs_ioctl+0x515/0x1a90
[ 637.099723][T17292] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 637.101972][T17292] ? __pfx_lock_release+0x10/0x10
[ 637.104242][T17292] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 637.106889][T17292] kvm_vcpu_compat_ioctl+0x216/0x3f0
[ 637.109253][T17292] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[ 637.111838][T17292] ? __fget_files+0x256/0x400
[ 637.113941][T17292] ? bpf_lsm_file_ioctl_compat+0x9/0x10
[ 637.116214][T17292] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[ 637.118538][T17292] __do_compat_sys_ioctl+0x2c3/0x330
[ 637.120652][T17292] __do_fast_syscall_32+0x73/0x120
[ 637.122695][T17292] do_fast_syscall_32+0x32/0x80
[ 637.124484][T17292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 637.126628][T17292] RIP: 0023:0xf7fb4579
[ 637.128289][T17292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 637.136329][T17292] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 637.139820][T17292] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[ 637.143037][T17292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 637.146380][T17292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 637.149118][T17292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 637.151786][T17292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 637.154789][T17292] </TASK>
[ 637.321464][T17297] IPv6: Can't replace route, no match found
[ 637.329937][ T39] audit: type=1326 audit(1721575124.258:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.3130" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0
[ 638.382723][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'.
[ 638.395918][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3136'.
[ 638.458673][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3136'.
[ 638.464767][T17316] netlink: 'syz.1.3136': attribute type 4 has an invalid length.
[ 638.483245][T17316] netlink: 'syz.1.3136': attribute type 4 has an invalid length.
[ 638.494291][ T5229] Bluetooth: hci1: command tx timeout
[ 638.543625][ T1130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 638.584678][T17321] FAULT_INJECTION: forcing a failure.
[ 638.584678][T17321] name failslab, interval 1, probability 0, space 0, times 0
[ 638.590248][T17321] CPU: 3 PID: 17321 Comm: syz.1.3137 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 638.594376][T17321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 638.598462][T17321] Call Trace:
[ 638.599730][T17321] <TASK>
[ 638.600826][T17321] dump_stack_lvl+0x16c/0x1f0
[ 638.602614][T17321] should_fail_ex+0x497/0x5b0
[ 638.604335][T17321] ? __pfx_lock_acquire+0x10/0x10
[ 638.606160][T17321] should_failslab+0x9/0x20
[ 638.607787][T17321] kmem_cache_alloc_noprof+0x6e/0x2f0
[ 638.610088][T17321] ? skb_clone+0x190/0x3f0
[ 638.612062][T17321] skb_clone+0x190/0x3f0
[ 638.613835][T17321] dev_queue_xmit_nit+0x38f/0xba0
[ 638.615851][T17321] dev_hard_start_xmit+0x56/0x790
[ 638.617849][T17321] ? kasan_save_track+0x14/0x30
[ 638.620008][T17321] __dev_queue_xmit+0x7c7/0x4300
[ 638.622061][T17321] ? __pfx___dev_queue_xmit+0x10/0x10
[ 638.624144][T17321] ? rcu_is_watching+0x12/0xc0
[ 638.625848][T17321] ? __copy_skb_header+0x2e8/0x5b0
[ 638.627848][T17321] ? __skb_clone+0x570/0x760
[ 638.629854][T17321] netlink_deliver_tap+0xa8a/0xcf0
[ 638.632094][T17321] netlink_unicast+0x606/0x830
[ 638.633876][T17321] ? __pfx_netlink_unicast+0x10/0x10
[ 638.635831][T17321] ? __phys_addr_symbol+0x30/0x80
[ 638.637748][T17321] ? __check_object_size+0x48e/0x720
[ 638.639673][T17321] netlink_sendmsg+0x8b8/0xd70
[ 638.641573][T17321] ? __pfx_netlink_sendmsg+0x10/0x10
[ 638.643583][T17321] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 638.645679][T17321] ____sys_sendmsg+0x9b4/0xb50
[ 638.647754][T17321] ? __pfx_____sys_sendmsg+0x10/0x10
[ 638.649710][T17321] ? get_compat_msghdr+0x11b/0x170
[ 638.651685][T17321] ? __pfx___lock_acquire+0x10/0x10
[ 638.653641][T17321] ___sys_sendmsg+0x135/0x1e0
[ 638.655602][T17321] ? __pfx____sys_sendmsg+0x10/0x10
[ 638.657159][T17321] ? ksys_write+0x21c/0x260
[ 638.659094][T17321] ? __fget_light+0x173/0x210
[ 638.661193][T17321] __sys_sendmsg+0x117/0x1f0
[ 638.663276][T17321] ? __pfx___sys_sendmsg+0x10/0x10
[ 638.665556][T17321] __do_fast_syscall_32+0x73/0x120
[ 638.667845][T17321] do_fast_syscall_32+0x32/0x80
[ 638.670007][T17321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 638.672796][T17321] RIP: 0023:0xf7fb4579
[ 638.674621][T17321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 638.682961][T17321] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[ 638.686629][T17321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000fc0
[ 638.690137][T17321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 638.693142][T17321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 638.695950][T17321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 638.699254][T17321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 638.702601][T17321] </TASK>
[ 638.742731][ T1130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 638.792879][T17326] devtmpfs: Bad value for 'mpol'
[ 638.852863][ T1130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 638.912330][T17332] syzkaller1: entered promiscuous mode
[ 638.914858][T17332] syzkaller1: entered allmulticast mode
[ 639.044279][ T1130] bridge_slave_1: left allmulticast mode
[ 639.047654][ T1130] bridge_slave_1: left promiscuous mode
[ 639.052816][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 639.054208][T17337] MTD: Couldn't look up '/dev/sg0': -15
[ 639.075073][ T1130] bridge_slave_0: left allmulticast mode
[ 639.077972][ T1130] bridge_slave_0: left promiscuous mode
[ 639.082110][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 639.203829][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[ 639.498118][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 639.504779][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 639.511103][ T1130] bond0 (unregistering): Released all slaves
[ 639.552470][T17344] netlink: 'syz.0.3145': attribute type 4 has an invalid length.
[ 639.568489][T17347] netlink: 'syz.0.3145': attribute type 4 has an invalid length.
[ 639.684805][T17350] libceph: resolve '.
[ 639.684805][T17350] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 639.684805][T17350] ' (ret=-3): failed
[ 639.766538][T17352] netlink: 'syz.3.3147': attribute type 13 has an invalid length.
[ 639.770013][T17352] macvtap0: entered allmulticast mode
[ 639.772274][T17352] veth0_macvtap: entered allmulticast mode
[ 639.775893][T17352] macvtap0: refused to change device tx_queue_len
[ 639.959899][ T1130] hsr_slave_0: left promiscuous mode
[ 639.963737][ T1130] hsr_slave_1: left promiscuous mode
[ 639.976539][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 639.981933][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 639.989381][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 639.992066][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 640.048370][ T1130] veth1_macvtap: left promiscuous mode
[ 640.050411][ T1130] veth0_macvtap: left promiscuous mode
[ 640.052678][ T1130] veth1_vlan: left promiscuous mode
[ 640.055441][ T1130] veth0_vlan: left promiscuous mode
[ 640.584306][ T5229] Bluetooth: hci1: command tx timeout
[ 641.062472][ T1130] team0 (unregistering): Port device team_slave_1 removed
[ 641.181526][ T1130] team0 (unregistering): Port device team_slave_0 removed
[ 641.190880][T17375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 641.193808][T17375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 641.198189][T17375] vhci_hcd vhci_hcd.0: Device attached
[ 641.206515][T17375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 641.209953][T17375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 641.215005][T17375] vhci_hcd vhci_hcd.0: Device attached
[ 641.217635][T17378] usbip_core: unknown command
[ 641.219355][T17378] vhci_hcd: unknown pdu 0
[ 641.221127][T17378] usbip_core: unknown command
[ 641.223604][ T13] vhci_hcd: stop threads
[ 641.229214][ T13] vhci_hcd: release socket
[ 641.230915][ T13] vhci_hcd: disconnect device
[ 641.233448][T17376] vhci_hcd: connection closed
[ 641.233640][ T13] vhci_hcd: stop threads
[ 641.237229][ T13] vhci_hcd: release socket
[ 641.238932][ T13] vhci_hcd: disconnect device
[ 641.332229][T17382] libceph: resolve '.
[ 641.332229][T17382] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 641.332229][T17382] ' (ret=-3): failed
[ 641.997885][T17275] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 642.011687][T17275] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 642.037582][T17275] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 642.058255][T17275] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 642.085405][T17390] __nla_validate_parse: 1 callbacks suppressed
[ 642.085419][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[ 642.104455][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3157'.
[ 642.170327][T17393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3157'.
[ 642.194529][T17390] netlink: 'syz.1.3157': attribute type 4 has an invalid length.
[ 642.218386][T17275] 8021q: adding VLAN 0 to HW filter on device bond0
[ 642.242808][T17275] 8021q: adding VLAN 0 to HW filter on device team0
[ 642.250519][T17390] netlink: 'syz.1.3157': attribute type 4 has an invalid length.
[ 642.269690][ T5260] bridge0: port 1(bridge_slave_0) entered blocking state
[ 642.272144][ T5260] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 642.285530][ T5260] bridge0: port 2(bridge_slave_1) entered blocking state
[ 642.287969][ T5260] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 642.429839][T17398] MTD: Couldn't look up '/dev/sg0': -15
[ 642.548439][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 642.603856][T17275] veth0_vlan: entered promiscuous mode
[ 642.625664][T17275] veth1_vlan: entered promiscuous mode
[ 642.653207][T17275] veth0_macvtap: entered promiscuous mode
[ 642.654245][ T5229] Bluetooth: hci1: command tx timeout
[ 642.661275][T17275] veth1_macvtap: entered promiscuous mode
[ 642.695941][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 642.700791][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.715459][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 642.719635][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.723814][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 642.728568][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.733315][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 642.738602][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.751038][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 642.771976][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 642.784249][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.788388][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 642.792783][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.797968][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 642.802301][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.806439][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 642.810751][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 642.818673][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 642.837558][T17275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 642.840648][T17275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 642.843633][T17275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 642.848673][T17275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 642.891303][T17408] libceph: resolve '.
[ 642.891303][T17408] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 642.891303][T17408] ' (ret=-3): failed
[ 642.973739][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 642.977086][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 643.051479][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 643.056753][T17412] libceph: resolve '.
[ 643.056753][T17412] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 643.056753][T17412] ' (ret=-3): failed
[ 643.064009][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 644.148824][T17416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[ 644.151082][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 644.154357][T17416] vhci_hcd vhci_hcd.0: Device attached
[ 644.158967][T17416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 644.161180][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 644.165251][T17416] vhci_hcd vhci_hcd.0: Device attached
[ 644.175903][T17420] usbip_core: unknown command
[ 644.177570][T17420] vhci_hcd: unknown pdu 0
[ 644.179225][T17420] usbip_core: unknown command
[ 644.181691][ T11] vhci_hcd: stop threads
[ 644.183507][ T11] vhci_hcd: release socket
[ 644.194158][ T11] vhci_hcd: disconnect device
[ 644.203269][T17417] vhci_hcd: connection closed
[ 644.203746][ T11] vhci_hcd: stop threads
[ 644.209230][ T11] vhci_hcd: release socket
[ 644.210771][ T11] vhci_hcd: disconnect device
[ 644.243526][T17426] syzkaller1: entered promiscuous mode
[ 644.245881][T17426] syzkaller1: entered allmulticast mode
[ 644.336050][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'.
[ 644.353146][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'.
[ 644.417847][T17431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3167'.
[ 644.424036][T17428] netlink: 'syz.1.3167': attribute type 4 has an invalid length.
[ 644.445795][T17428] netlink: 'syz.1.3167': attribute type 4 has an invalid length.
[ 644.570689][T17434] libceph: resolve '.
[ 644.570689][T17434] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 644.570689][T17434] ' (ret=-3): failed
[ 644.629241][T17434] Restarting kernel threads ... done.
[ 644.969561][T17443] fuse: Unknown parameter 'g��up_id'
[ 645.050354][T17447] libceph: resolve '.
[ 645.050354][T17447] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 645.050354][T17447] ' (ret=-3): failed
[ 645.956213][T17458] libceph: resolve '.
[ 645.956213][T17458] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 645.956213][T17458] ' (ret=-3): failed
[ 646.162618][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 646.743707][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'.
[ 646.766174][T17462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'.
[ 646.830882][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3176'.
[ 646.838881][ T39] audit: type=1326 audit(1721575133.768:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17463 comm="syz.3.3177" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0
[ 646.841229][T17462] netlink: 'syz.1.3176': attribute type 4 has an invalid length.
[ 646.877013][T12772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 646.877545][T17462] netlink: 'syz.1.3176': attribute type 4 has an invalid length.
[ 646.881372][T12772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 646.886879][T17469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3178'.
[ 646.888473][T12772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 646.897500][T12772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 646.900987][T12772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 646.903662][T12772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 647.018334][T17483] 9pnet_fd: Insufficient options for proto=fd
[ 647.096595][T17475] chnl_net:caif_netlink_parms(): no params data found
[ 647.223891][T17475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 647.228661][T17475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 647.232307][T17475] bridge_slave_0: entered allmulticast mode
[ 647.241459][T17475] bridge_slave_0: entered promiscuous mode
[ 647.251531][T17475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 647.256226][T17475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 647.259408][T17475] bridge_slave_1: entered allmulticast mode
[ 647.263767][T17475] bridge_slave_1: entered promiscuous mode
[ 647.330422][T17475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 647.339254][T17475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 647.404834][T17475] team0: Port device team_slave_0 added
[ 647.410468][T17475] team0: Port device team_slave_1 added
[ 647.463521][T17475] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 647.469154][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 647.481263][T17475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 647.487721][T17475] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 647.490784][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 647.501475][T17475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 647.562501][T17475] hsr_slave_0: entered promiscuous mode
[ 647.566038][T17475] hsr_slave_1: entered promiscuous mode
[ 647.569049][T17475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 647.571858][T17475] Cannot create hsr debugfs directory
[ 647.724030][T17505] libceph: resolve '.
[ 647.724030][T17505] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 647.724030][T17505] ' (ret=-3): failed
[ 647.899651][T17508] __nla_validate_parse: 2 callbacks suppressed
[ 647.899666][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'.
[ 647.918215][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3186'.
[ 647.997738][T17511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3186'.
[ 648.008708][T17508] netlink: 'syz.0.3186': attribute type 4 has an invalid length.
[ 648.036347][T17508] netlink: 'syz.0.3186': attribute type 4 has an invalid length.
[ 648.200589][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'.
[ 648.223126][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3188'.
[ 648.292413][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3188'.
[ 648.303257][T17515] netlink: 'syz.0.3188': attribute type 4 has an invalid length.
[ 648.347913][T17515] netlink: 'syz.0.3188': attribute type 4 has an invalid length.
[ 648.688916][T17525] Invalid ELF section header size
[ 648.694739][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'.
[ 648.880120][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 648.984589][ T5229] Bluetooth: hci1: command tx timeout
[ 649.003416][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 649.100676][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 649.158504][ T39] audit: type=1326 audit(1721575136.088:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17535 comm="syz.1.3193" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0
[ 649.292811][ T11] bridge_slave_1: left allmulticast mode
[ 649.295259][ T11] bridge_slave_1: left promiscuous mode
[ 649.297610][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 649.308044][ T11] bridge_slave_0: left allmulticast mode
[ 649.310034][ T11] bridge_slave_0: left promiscuous mode
[ 649.313705][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 649.552908][ T39] audit: type=1326 audit(1721575136.478:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3194" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0
[ 649.703169][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 649.718691][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 649.724437][ T11] bond0 (unregistering): Released all slaves
[ 649.941440][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'.
[ 649.950046][T17555] libceph: resolve '.
[ 649.950046][T17555] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 649.950046][T17555] ' (ret=-3): failed
[ 649.975075][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3197'.
[ 650.048794][T17554] netlink: 'syz.0.3197': attribute type 4 has an invalid length.
[ 650.079444][T17554] netlink: 'syz.0.3197': attribute type 4 has an invalid length.
[ 650.105445][ T11] hsr_slave_0: left promiscuous mode
[ 650.109450][ T11] hsr_slave_1: left promiscuous mode
[ 650.112711][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 650.115370][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 650.118415][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 650.120922][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 650.160277][ T11] veth1_macvtap: left promiscuous mode
[ 650.162673][ T11] veth0_macvtap: left promiscuous mode
[ 650.165218][ T11] veth1_vlan: left promiscuous mode
[ 650.167050][ T11] veth0_vlan: left promiscuous mode
[ 650.824765][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 650.883180][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 650.889270][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 651.058381][ T5229] Bluetooth: hci1: command tx timeout
[ 651.375779][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 651.515185][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 651.593677][T17577] Invalid ELF section header size
[ 651.601664][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'.
[ 652.243144][T17583] FAULT_INJECTION: forcing a failure.
[ 652.243144][T17583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 652.249703][T17583] CPU: 1 PID: 17583 Comm: syz.3.3203 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 652.253568][T17583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 652.258088][T17583] Call Trace:
[ 652.259244][T17583] <TASK>
[ 652.260341][T17583] dump_stack_lvl+0x16c/0x1f0
[ 652.262387][T17583] should_fail_ex+0x497/0x5b0
[ 652.264297][T17475] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 652.264435][T17583] _copy_from_user+0x30/0xf0
[ 652.268907][T17583] get_compat_msghdr+0xa8/0x170
[ 652.270749][T17583] ? __pfx_get_compat_msghdr+0x10/0x10
[ 652.272825][T17583] ? __pfx___lock_acquire+0x10/0x10
[ 652.274999][T17583] ___sys_sendmsg+0x1b0/0x1e0
[ 652.276595][T17583] ? __pfx____sys_sendmsg+0x10/0x10
[ 652.278858][T17583] ? ksys_write+0x21c/0x260
[ 652.280593][T17583] ? __fget_light+0x173/0x210
[ 652.282289][T17583] __sys_sendmsg+0x117/0x1f0
[ 652.284319][T17583] ? __pfx___sys_sendmsg+0x10/0x10
[ 652.286147][T17583] __do_fast_syscall_32+0x73/0x120
[ 652.288228][T17583] do_fast_syscall_32+0x32/0x80
[ 652.290069][T17583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 652.292531][T17583] RIP: 0023:0xf7fb8579
[ 652.294167][T17583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 652.301433][T17583] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[ 652.305117][T17583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[ 652.308201][T17583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 652.311281][T17583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 652.314667][T17583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 652.318031][T17583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 652.321410][T17583] </TASK>
[ 652.322795][ C1] vkms_vblank_simulate: vblank timer overrun
[ 652.333943][T17584] libceph: resolve '.
[ 652.333943][T17584] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 652.333943][T17584] ' (ret=-3): failed
[ 652.342344][T17475] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 652.359186][T17475] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 652.371744][T17475] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 652.449687][ T39] audit: type=1326 audit(1721575139.378:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.3.3204" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0
[ 652.455726][T17475] 8021q: adding VLAN 0 to HW filter on device bond0
[ 652.469893][T17475] 8021q: adding VLAN 0 to HW filter on device team0
[ 652.481699][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 652.484829][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 652.490296][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 652.492794][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 652.528924][T17475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 652.597366][T17598] netlink: 'syz.1.3205': attribute type 4 has an invalid length.
[ 652.641163][T17592] netlink: 'syz.1.3205': attribute type 4 has an invalid length.
[ 652.674556][T17475] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 652.714419][T17475] veth0_vlan: entered promiscuous mode
[ 652.779125][T17475] veth1_vlan: entered promiscuous mode
[ 652.807516][T17475] veth0_macvtap: entered promiscuous mode
[ 652.813606][T17475] veth1_macvtap: entered promiscuous mode
[ 652.832672][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 652.842164][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.846615][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 652.850973][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.860249][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 652.864783][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.868141][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 652.871696][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.877445][T17475] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 652.882717][T17605] netlink: 'syz.1.3206': attribute type 4 has an invalid length.
[ 652.896678][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 652.900795][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.904739][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 652.908635][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.912282][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 652.916919][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.921077][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 652.926103][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 652.941984][T17475] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 652.946854][T17602] netlink: 'syz.1.3206': attribute type 4 has an invalid length.
[ 652.959299][T17475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 652.963234][T17475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 652.967364][T17475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 652.971210][T17475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 653.031286][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 653.038268][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 653.062052][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 653.065903][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 653.136865][ T5229] Bluetooth: hci0: unexpected event for opcode 0x0000
[ 653.205585][T17614] syzkaller1: entered promiscuous mode
[ 653.208484][T17614] syzkaller1: entered allmulticast mode
[ 653.250708][T17616] FAULT_INJECTION: forcing a failure.
[ 653.250708][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 653.256045][T17616] CPU: 3 PID: 17616 Comm: syz.3.3210 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 653.260368][T17616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 653.264244][T17616] Call Trace:
[ 653.265472][T17616] <TASK>
[ 653.266576][T17616] dump_stack_lvl+0x16c/0x1f0
[ 653.268328][T17616] should_fail_ex+0x497/0x5b0
[ 653.270008][T17616] _copy_from_user+0x30/0xf0
[ 653.271678][T17616] compat_do_replace+0x281/0x750
[ 653.273517][T17616] ? __pfx_compat_do_replace+0x10/0x10
[ 653.275471][T17616] ? __pfx_aa_get_newest_label+0x10/0x10
[ 653.277455][T17616] ? find_held_lock+0x2d/0x110
[ 653.279757][T17616] ? bpf_lsm_capable+0x9/0x10
[ 653.282069][T17616] ? security_capable+0x98/0xd0
[ 653.284190][T17616] do_ebt_set_ctl+0x4af/0x580
[ 653.286528][T17616] ? __pfx___mutex_lock+0x10/0x10
[ 653.289000][T17616] ? __pfx_do_ebt_set_ctl+0x10/0x10
[ 653.291499][T17616] ? __pfx_do_ip_setsockopt+0x10/0x10
[ 653.293410][T17616] ? nf_sockopt_find.constprop.0+0x221/0x290
[ 653.296077][T17616] nf_setsockopt+0x8a/0xf0
[ 653.298097][T17616] ip_setsockopt+0xcb/0xf0
[ 653.300313][T17616] udp_setsockopt+0x7d/0xd0
[ 653.302490][T17616] ? __pfx_sock_common_setsockopt+0x10/0x10
[ 653.305452][T17616] do_sock_setsockopt+0x222/0x480
[ 653.307422][T17616] ? __pfx_do_sock_setsockopt+0x10/0x10
[ 653.309438][T17616] ? __fget_light+0x173/0x210
[ 653.311400][T17616] __sys_setsockopt+0x1a4/0x270
[ 653.313135][T17616] ? __pfx___sys_setsockopt+0x10/0x10
[ 653.315258][T17616] ? fput+0x32/0x390
[ 653.317017][T17616] ? ksys_write+0x1ab/0x260
[ 653.319002][T17616] ? __pfx_ksys_write+0x10/0x10
[ 653.321109][T17616] __ia32_sys_setsockopt+0xbc/0x160
[ 653.323135][T17616] ? lockdep_hardirqs_on+0x7c/0x110
[ 653.324966][T17616] ? syscall_enter_from_user_mode_prepare+0x68/0xe0
[ 653.327257][T17616] __do_fast_syscall_32+0x73/0x120
[ 653.329067][T17616] do_fast_syscall_32+0x32/0x80
[ 653.330878][T17616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 653.333073][T17616] RIP: 0023:0xf7fb8579
[ 653.334710][T17616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 653.342777][T17616] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[ 653.345691][T17616] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000
[ 653.348444][T17616] RDX: 0000000000000080 RSI: 00000000200012c0 RDI: 00000000000000e0
[ 653.351200][T17616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 653.353940][T17616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 653.356705][T17616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 653.359463][T17616] </TASK>
[ 654.158474][T17630] MTD: Couldn't look up '/dev/sg0': -15
[ 654.817249][T17634] __nla_validate_parse: 5 callbacks suppressed
[ 654.817265][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'.
[ 654.832975][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[ 654.910486][T17634] netlink: 'syz.0.3215': attribute type 4 has an invalid length.
[ 654.938433][T17634] netlink: 'syz.0.3215': attribute type 4 has an invalid length.
[ 655.025726][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'.
[ 655.031988][T17641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'.
[ 655.045545][T17639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'.
[ 655.114491][T17639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3216'.
[ 655.121116][T17639] netlink: 'syz.0.3216': attribute type 4 has an invalid length.
[ 655.162599][T17639] netlink: 'syz.0.3216': attribute type 4 has an invalid length.
[ 655.684264][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 655.880786][ T8] usb 8-1: config index 0 descriptor too short (expected 57, got 36)
[ 655.884426][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 655.889157][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 655.896181][ T8] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 655.900015][ T8] usb 8-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[ 655.903252][ T8] usb 8-1: Manufacturer: syz
[ 655.909758][ T8] usb 8-1: config 0 descriptor??
[ 656.240960][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 656.378629][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 656.380955][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 656.386160][ T8] arvo 0003:1E7D:30D4.0006: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 656.964036][T17654] syzkaller1: entered promiscuous mode
[ 656.966738][T17654] syzkaller1: entered allmulticast mode
[ 657.107611][T12772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 657.115024][T12772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 657.120170][T12772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 657.125699][T12772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 657.132045][T12772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 657.136861][T12772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 657.182464][T17659] libceph: resolve '.
[ 657.182464][T17659] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 657.182464][T17659] ' (ret=-3): failed
[ 657.383629][T17655] chnl_net:caif_netlink_parms(): no params data found
[ 657.590951][T17655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 657.597920][T17655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 657.600991][T17655] bridge_slave_0: entered allmulticast mode
[ 657.605569][T17655] bridge_slave_0: entered promiscuous mode
[ 657.611575][T17655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 657.615305][T17655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 657.618331][T17655] bridge_slave_1: entered allmulticast mode
[ 657.622762][T17655] bridge_slave_1: entered promiscuous mode
[ 657.740459][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 657.748497][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 657.823928][T17655] team0: Port device team_slave_0 added
[ 657.830926][T17655] team0: Port device team_slave_1 added
[ 657.898647][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 657.901137][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 657.910946][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 657.925029][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 657.927676][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 657.938045][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 658.032635][T17655] hsr_slave_0: entered promiscuous mode
[ 658.037661][T17655] hsr_slave_1: entered promiscuous mode
[ 658.040936][T17655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 658.044086][T17655] Cannot create hsr debugfs directory
[ 658.131359][ T1941] usb 8-1: USB disconnect, device number 10
[ 658.387520][T17669] MTD: Couldn't look up '/dev/sg0': -15
[ 658.639567][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 658.716951][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 658.781492][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 658.812184][ T39] audit: type=1326 audit(1721575145.738:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.3.3223" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0
[ 658.918788][ T1086] bridge_slave_1: left allmulticast mode
[ 658.920913][ T1086] bridge_slave_1: left promiscuous mode
[ 658.923039][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[ 658.930782][ T1086] bridge_slave_0: left allmulticast mode
[ 658.933368][ T1086] bridge_slave_0: left promiscuous mode
[ 658.936918][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 658.949321][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'.
[ 659.228340][T12772] Bluetooth: hci1: command tx timeout
[ 659.329041][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 659.335990][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 659.342047][ T1086] bond0 (unregistering): Released all slaves
[ 659.384293][T17680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3224'.
[ 659.387563][T17688] netlink: 'syz.3.3224': attribute type 4 has an invalid length.
[ 659.396650][T17683] netlink: 'syz.3.3224': attribute type 4 has an invalid length.
[ 659.464434][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'.
[ 659.488067][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3226'.
[ 659.560733][T17692] netlink: 'syz.3.3226': attribute type 4 has an invalid length.
[ 659.607234][T17692] netlink: 'syz.3.3226': attribute type 4 has an invalid length.
[ 659.695600][T17696] ufs: You didn't specify the type of your ufs filesystem
[ 659.695600][T17696]
[ 659.695600][T17696] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 659.695600][T17696]
[ 659.695600][T17696] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 659.713130][T17696] syz.3.3227: attempt to access beyond end of device
[ 659.713130][T17696] loop3: rw=0, sector=16, nr_sectors = 2 limit=0
[ 659.801173][ T1086] hsr_slave_0: left promiscuous mode
[ 659.804030][ T1086] hsr_slave_1: left promiscuous mode
[ 659.807213][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 659.810417][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 659.813948][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 659.818326][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 659.862922][ T1086] veth1_macvtap: left promiscuous mode
[ 659.865424][ T1086] veth0_macvtap: left promiscuous mode
[ 659.867509][ T1086] veth1_vlan: left promiscuous mode
[ 659.869523][ T1086] veth0_vlan: left promiscuous mode
[ 659.925920][T17704] MTD: Couldn't look up '/dev/sg0': -15
[ 660.862420][ T1086] team0 (unregistering): Port device team_slave_1 removed
[ 661.002068][ T1086] team0 (unregistering): Port device team_slave_0 removed
[ 661.295605][T12772] Bluetooth: hci1: command tx timeout
[ 661.618326][ T4580] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 661.818588][ T4580] usb 5-1: config index 0 descriptor too short (expected 57, got 36)
[ 661.822187][ T4580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 661.827374][ T4580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 661.833010][ T4580] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 661.837310][ T4580] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[ 661.840899][ T4580] usb 5-1: Manufacturer: syz
[ 661.844980][ T4580] usb 5-1: config 0 descriptor??
[ 661.847647][T17655] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 661.856188][T17655] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 661.862785][T17655] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 661.872492][T17655] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 661.958900][T17655] 8021q: adding VLAN 0 to HW filter on device bond0
[ 661.973056][T17655] 8021q: adding VLAN 0 to HW filter on device team0
[ 661.980867][ T1941] bridge0: port 1(bridge_slave_0) entered blocking state
[ 661.983877][ T1941] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 661.994970][ T1941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 661.997409][ T1941] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 662.119240][ T39] audit: type=1326 audit(1721575149.048:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.3.3232" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0
[ 662.164582][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 662.208016][T17655] veth0_vlan: entered promiscuous mode
[ 662.217355][T17655] veth1_vlan: entered promiscuous mode
[ 662.268577][T17655] veth0_macvtap: entered promiscuous mode
[ 662.274790][T17655] veth1_macvtap: entered promiscuous mode
[ 662.288063][T17720] libceph: resolve '.
[ 662.288063][T17720] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 662.288063][T17720] ' (ret=-3): failed
[ 662.306281][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 662.307589][ T4580] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[ 662.310575][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.313191][ T4580] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[ 662.317480][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 662.325665][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.329425][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 662.331581][ T4580] arvo 0003:1E7D:30D4.0007: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 662.333401][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.341759][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 662.346799][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.361965][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 662.375705][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 662.380420][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.384835][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 662.389486][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.393814][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 662.398507][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.402828][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 662.407523][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 662.413474][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 662.421712][T17655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 662.426765][T17655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 662.430700][T17655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 662.434713][T17655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 662.518599][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 662.521674][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 662.555234][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 662.558064][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 662.574361][T12772] Bluetooth: hci2: command 0x0405 tx timeout
[ 662.576733][T12772] Bluetooth: hci4: command 0x0406 tx timeout
[ 663.380480][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3234'.
[ 663.391556][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3234'.
[ 663.450934][T17726] netlink: 'syz.3.3234': attribute type 4 has an invalid length.
[ 663.467704][T17726] netlink: 'syz.3.3234': attribute type 4 has an invalid length.
[ 663.530636][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'.
[ 663.565611][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'.
[ 663.643746][T17734] netlink: 'syz.3.3236': attribute type 4 has an invalid length.
[ 663.661734][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 663.666424][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 663.671245][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 663.679083][T17731] netlink: 'syz.3.3236': attribute type 4 has an invalid length.
[ 663.680655][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 663.687091][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 663.690507][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 663.863730][T17735] chnl_net:caif_netlink_parms(): no params data found
[ 663.980583][T17735] bridge0: port 1(bridge_slave_0) entered blocking state
[ 663.983370][T17735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 663.987646][T17735] bridge_slave_0: entered allmulticast mode
[ 663.990813][T17735] bridge_slave_0: entered promiscuous mode
[ 663.997238][T17735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 664.000209][T17735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 664.002701][T17735] bridge_slave_1: entered allmulticast mode
[ 664.007791][T17735] bridge_slave_1: entered promiscuous mode
[ 664.060469][ T35] usb 5-1: USB disconnect, device number 25
[ 664.082581][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 664.095570][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 664.168678][T17735] team0: Port device team_slave_0 added
[ 664.177612][T17735] team0: Port device team_slave_1 added
[ 664.227929][T17750] syzkaller1: entered promiscuous mode
[ 664.230019][T17750] syzkaller1: entered allmulticast mode
[ 664.238482][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 664.240832][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 664.251408][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 664.274055][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 664.278814][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 664.290592][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 664.364470][T17735] hsr_slave_0: entered promiscuous mode
[ 664.367938][T17735] hsr_slave_1: entered promiscuous mode
[ 664.370632][T17735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 664.373999][T17735] Cannot create hsr debugfs directory
[ 664.381993][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'.
[ 664.439742][T17753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3240'.
[ 664.510782][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3240'.
[ 664.541649][T17735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 664.555157][T17753] netlink: 'syz.0.3240': attribute type 4 has an invalid length.
[ 664.583797][T17753] netlink: 'syz.0.3240': attribute type 4 has an invalid length.
[ 664.653969][T17735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 664.702736][T17760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 664.705676][T17760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 664.709357][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'.
[ 664.709863][T17760] vhci_hcd vhci_hcd.0: Device attached
[ 664.716826][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3243'.
[ 664.720568][T17760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 664.723308][T17760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 664.728496][T17760] vhci_hcd vhci_hcd.0: Device attached
[ 664.734438][T17765] usbip_core: unknown command
[ 664.736552][T17765] vhci_hcd: unknown pdu 0
[ 664.738510][T17765] usbip_core: unknown command
[ 664.744412][T17762] vhci_hcd: connection closed
[ 664.749694][ T1086] vhci_hcd: stop threads
[ 664.753598][ T1086] vhci_hcd: release socket
[ 664.759035][ T1086] vhci_hcd: disconnect device
[ 664.764220][ T1086] vhci_hcd: stop threads
[ 664.764845][T17735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 664.766245][ T1086] vhci_hcd: release socket
[ 664.772639][ T1086] vhci_hcd: disconnect device
[ 664.777306][T17769] netlink: 'syz.0.3243': attribute type 4 has an invalid length.
[ 664.788910][T17764] netlink: 'syz.0.3243': attribute type 4 has an invalid length.
[ 664.850337][T17735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 664.999670][T17735] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 665.007493][T17735] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 665.013935][T17735] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 665.021221][T17735] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 665.087049][T17735] 8021q: adding VLAN 0 to HW filter on device bond0
[ 665.104292][T17735] 8021q: adding VLAN 0 to HW filter on device team0
[ 665.110937][T14880] bridge0: port 1(bridge_slave_0) entered blocking state
[ 665.114084][T14880] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 665.125036][ T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 665.127775][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 665.170484][T17735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 665.278217][T17735] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 665.311126][T17735] veth0_vlan: entered promiscuous mode
[ 665.322971][T17735] veth1_vlan: entered promiscuous mode
[ 665.345714][T17735] veth0_macvtap: entered promiscuous mode
[ 665.351922][T17735] veth1_macvtap: entered promiscuous mode
[ 665.366159][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 665.370150][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.373501][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 665.378392][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.382239][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 665.387131][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.391125][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 665.398735][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.402361][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 665.406372][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.412196][T17735] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 665.419035][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'.
[ 665.423122][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 665.427710][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.431138][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 665.434959][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.439395][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 665.443772][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.448533][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 665.452577][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.456552][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 665.460494][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 665.464916][T17735] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 665.472418][T17735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 665.476591][T17735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 665.480347][T17735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 665.484076][T17735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 665.538956][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 665.542250][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 665.550668][T17781] netlink: 'syz.3.3245': attribute type 4 has an invalid length.
[ 665.575431][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 665.578509][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 665.591681][T17778] netlink: 'syz.3.3245': attribute type 4 has an invalid length.
[ 665.666852][T17784] dvmrp0: entered allmulticast mode
[ 665.775055][T17724] Bluetooth: hci1: command tx timeout
[ 665.867258][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 665.898214][T17796] syzkaller1: entered promiscuous mode
[ 665.900574][T17796] syzkaller1: entered allmulticast mode
[ 666.847744][T17803] netlink: 'syz.3.3251': attribute type 4 has an invalid length.
[ 666.868225][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 666.872068][T17803] netlink: 'syz.3.3251': attribute type 4 has an invalid length.
[ 666.874969][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 666.879419][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 666.895472][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 666.899960][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 666.904801][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 666.949871][T17812] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 666.952590][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 666.956336][T17812] vhci_hcd vhci_hcd.0: Device attached
[ 666.960600][T17812] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 666.963369][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 666.967223][T17812] vhci_hcd vhci_hcd.0: Device attached
[ 666.968030][T17811] syzkaller1: entered promiscuous mode
[ 666.971673][T17811] syzkaller1: entered allmulticast mode
[ 666.974797][T17815] usbip_core: unknown command
[ 666.976926][T17815] vhci_hcd: unknown pdu 0
[ 666.978834][T17815] usbip_core: unknown command
[ 666.983575][ T11] vhci_hcd: stop threads
[ 666.984062][T17813] vhci_hcd: connection closed
[ 666.990590][ T11] vhci_hcd: release socket
[ 667.000433][ T11] vhci_hcd: disconnect device
[ 667.002340][ T11] vhci_hcd: stop threads
[ 667.003970][ T11] vhci_hcd: release socket
[ 667.006919][ T11] vhci_hcd: disconnect device
[ 667.113368][T17807] chnl_net:caif_netlink_parms(): no params data found
[ 667.261624][T17807] bridge0: port 1(bridge_slave_0) entered blocking state
[ 667.266080][T17807] bridge0: port 1(bridge_slave_0) entered disabled state
[ 667.269328][T17807] bridge_slave_0: entered allmulticast mode
[ 667.273012][T17807] bridge_slave_0: entered promiscuous mode
[ 667.287755][T17807] bridge0: port 2(bridge_slave_1) entered blocking state
[ 667.291002][T17807] bridge0: port 2(bridge_slave_1) entered disabled state
[ 667.296696][T17807] bridge_slave_1: entered allmulticast mode
[ 667.300043][T17807] bridge_slave_1: entered promiscuous mode
[ 667.397639][T17807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 667.419042][T17807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 667.532257][T17807] team0: Port device team_slave_0 added
[ 667.541591][T17807] team0: Port device team_slave_1 added
[ 667.695308][T17807] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 667.701569][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 667.714373][T17807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 667.724356][T17807] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 667.727217][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 667.738170][T17807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 667.748940][T17829] MTD: Couldn't look up '/dev/sg0': -15
[ 667.864336][ T5227] Bluetooth: hci1: command tx timeout
[ 667.911964][T17831] tmpfs: Bad value for 'mpol'
[ 667.948826][T17807] hsr_slave_0: entered promiscuous mode
[ 667.952321][T17807] hsr_slave_1: entered promiscuous mode
[ 667.957236][T17807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 667.960475][T17807] Cannot create hsr debugfs directory
[ 668.422105][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 668.507734][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 668.645477][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 668.751535][T17844] __nla_validate_parse: 4 callbacks suppressed
[ 668.751550][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'.
[ 668.782281][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3260'.
[ 668.804589][ T1086] bridge_slave_1: left allmulticast mode
[ 668.807287][ T1086] bridge_slave_1: left promiscuous mode
[ 668.822729][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[ 668.832285][ T1086] bridge_slave_0: left allmulticast mode
[ 668.844539][ T1086] bridge_slave_0: left promiscuous mode
[ 668.847745][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[ 668.974480][ T5227] Bluetooth: hci5: command tx timeout
[ 669.301943][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 669.313279][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 669.320621][ T1086] bond0 (unregistering): Released all slaves
[ 669.356338][T17847] netlink: 'syz.3.3260': attribute type 4 has an invalid length.
[ 669.368324][T17844] netlink: 'syz.3.3260': attribute type 4 has an invalid length.
[ 669.455464][T17857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 669.458164][T17857] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 669.460994][T17857] vhci_hcd vhci_hcd.0: Device attached
[ 669.493828][T17857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 669.496674][T17857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 669.512894][T17857] vhci_hcd vhci_hcd.0: Device attached
[ 669.518318][T17860] usbip_core: unknown command
[ 669.520468][T17860] vhci_hcd: unknown pdu 0
[ 669.522409][T17860] usbip_core: unknown command
[ 669.525468][T12815] vhci_hcd: stop threads
[ 669.526088][T17858] vhci_hcd: connection closed
[ 669.527348][T12815] vhci_hcd: release socket
[ 669.531954][T12815] vhci_hcd: disconnect device
[ 669.534857][T12815] vhci_hcd: stop threads
[ 669.537115][T12815] vhci_hcd: release socket
[ 669.539263][T12815] vhci_hcd: disconnect device
[ 669.571638][T17862] libceph: resolve '.
[ 669.571638][T17862] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 669.571638][T17862] ' (ret=-3): failed
[ 669.944333][ T5227] Bluetooth: hci1: command tx timeout
[ 670.031872][ T1086] hsr_slave_0: left promiscuous mode
[ 670.039581][ T1086] hsr_slave_1: left promiscuous mode
[ 670.043403][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 670.050482][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 670.054760][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 670.059218][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 670.097392][ T1086] veth1_macvtap: left promiscuous mode
[ 670.099345][ T1086] veth0_macvtap: left promiscuous mode
[ 670.101411][ T1086] veth1_vlan: left promiscuous mode
[ 670.104882][ T1086] veth0_vlan: left promiscuous mode
[ 671.054317][ T5227] Bluetooth: hci5: command tx timeout
[ 671.568604][ T1086] team0 (unregistering): Port device team_slave_1 removed
[ 671.716521][ T1086] team0 (unregistering): Port device team_slave_0 removed
[ 672.014304][ T5227] Bluetooth: hci1: command tx timeout
[ 672.859268][T17807] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 672.915553][T17807] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 672.953723][T17807] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 672.970864][T17807] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 673.108004][T17807] 8021q: adding VLAN 0 to HW filter on device bond0
[ 673.126366][T17807] 8021q: adding VLAN 0 to HW filter on device team0
[ 673.132845][T14973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 673.135619][T14973] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 673.144422][ T5227] Bluetooth: hci5: command tx timeout
[ 673.150526][ T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 673.153325][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 673.228316][T17883] syzkaller1: entered promiscuous mode
[ 673.239432][T17883] syzkaller1: entered allmulticast mode
[ 673.347321][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 673.383520][T17807] veth0_vlan: entered promiscuous mode
[ 673.393431][T17807] veth1_vlan: entered promiscuous mode
[ 673.437014][T17807] veth0_macvtap: entered promiscuous mode
[ 673.441665][T17807] veth1_macvtap: entered promiscuous mode
[ 673.447766][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'.
[ 673.460761][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3270'.
[ 673.467278][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 673.475297][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.479477][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 673.484877][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.489202][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 673.493686][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.497997][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 673.502548][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.506990][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 673.511576][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.519398][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 673.534637][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 673.555499][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.574643][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 673.579525][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.583629][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 673.588313][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.592321][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 673.592900][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'.
[ 673.596863][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.604521][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 673.608564][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 673.614049][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 673.617494][T17892] netlink: 'syz.1.3270': attribute type 4 has an invalid length.
[ 673.630072][T17889] netlink: 'syz.1.3270': attribute type 4 has an invalid length.
[ 673.646732][T17807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 673.650129][T17807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 673.653902][T17807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 673.658471][T17807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 673.663954][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3271'.
[ 673.690922][T17896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 673.693524][T17896] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 673.699831][T17896] vhci_hcd vhci_hcd.0: Device attached
[ 673.723695][T17896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 673.726379][T17896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 673.732630][T17896] vhci_hcd vhci_hcd.0: Device attached
[ 673.741590][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 673.743192][T17894] netlink: 'syz.0.3271': attribute type 4 has an invalid length.
[ 673.746129][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 673.746749][T17900] usbip_core: unknown command
[ 673.746760][T17900] vhci_hcd: unknown pdu 0
[ 673.746769][T17900] usbip_core: unknown command
[ 673.751794][ T1130] vhci_hcd: stop threads
[ 673.759107][ T1130] vhci_hcd: release socket
[ 673.760943][ T1130] vhci_hcd: disconnect device
[ 673.785889][T17894] netlink: 'syz.0.3271': attribute type 4 has an invalid length.
[ 673.787424][T17897] vhci_hcd: connection closed
[ 673.790701][ T1130] vhci_hcd: stop threads
[ 673.795257][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 673.799277][ T1130] vhci_hcd: release socket
[ 673.801477][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 673.803963][ T1130] vhci_hcd: disconnect device
[ 673.984048][T17908] libceph: resolve '.
[ 673.984048][T17908] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[ 673.984048][T17908] ' (ret=-3): failed
[ 674.070082][ T39] audit: type=1326 audit(1721575160.998:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.3275" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x0
[ 674.855776][T17918] dccp_invalid_packet: P.CsCov 15 exceeds packet length 400
[ 675.255061][T17925] MTD: Couldn't look up '/dev/sg0': -15
[ 675.542766][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'.
[ 675.553914][T17927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3280'.
[ 675.613915][T17927] netlink: 'syz.1.3280': attribute type 4 has an invalid length.
[ 675.640464][T17927] netlink: 'syz.1.3280': attribute type 4 has an invalid length.
[ 675.943715][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'.
[ 675.965106][T17934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3282'.
[ 676.037720][T17934] netlink: 'syz.3.3282': attribute type 4 has an invalid length.
[ 676.087271][T17934] netlink: 'syz.3.3282': attribute type 4 has an invalid length.
[ 676.409429][T17941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 676.411844][T17941] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 676.421105][T17941] vhci_hcd vhci_hcd.0: Device attached
[ 676.428537][T17941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 676.431156][T17941] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 676.440333][T17941] vhci_hcd vhci_hcd.0: Device attached
[ 676.450740][T17944] usbip_core: unknown command
[ 676.453117][T17944] vhci_hcd: unknown pdu 0
[ 676.455084][T17944] usbip_core: unknown command
[ 676.457099][ T13] vhci_hcd: stop threads
[ 676.458870][ T13] vhci_hcd: release socket
[ 676.460614][ T13] vhci_hcd: disconnect device
[ 676.463342][T17942] vhci_hcd: connection closed
[ 676.463571][ T13] vhci_hcd: stop threads
[ 676.467405][ T13] vhci_hcd: release socket
[ 676.469282][ T13] vhci_hcd: disconnect device
[ 676.547527][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 677.702285][T17724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 677.709842][T17724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 677.714058][T17724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 677.717967][T17724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 677.721324][T17724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 677.724711][T17724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 677.739815][T17952]
[ 677.740920][T17952] ======================================================
[ 677.743964][T17952] WARNING: possible circular locking dependency detected
[ 677.747047][T17952] 6.10.0-syzkaller-11185-g2c9b3512402e #0 Not tainted
[ 677.750952][T17952] ------------------------------------------------------
[ 677.754366][T17952] syz.3.3287/17952 is trying to acquire lock:
[ 677.756849][T17952] ffff888056def058 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_shutdown+0x65/0x800
[ 677.760300][T17952]
[ 677.760300][T17952] but task is already holding lock:
[ 677.763100][T17952] ffff888057051870 (&nsock->tx_lock){+.+.}-{3:3}, at: sock_shutdown+0x16f/0x280
[ 677.766571][T17952]
[ 677.766571][T17952] which lock already depends on the new lock.
[ 677.766571][T17952]
[ 677.770497][T17952]
[ 677.770497][T17952] the existing dependency chain (in reverse order) is:
[ 677.773881][T17952]
[ 677.773881][T17952] -> #6 (&nsock->tx_lock){+.+.}-{3:3}:
[ 677.776790][T17952] __mutex_lock+0x175/0x9c0
[ 677.778743][T17952] sock_shutdown+0x16f/0x280
[ 677.780626][T17952] nbd_config_put+0x1e6/0x750
[ 677.782613][T17952] nbd_release+0xb7/0x190
[ 677.784492][T17952] blkdev_put_whole+0xad/0xf0
[ 677.786493][T17952] bdev_release+0x496/0x6f0
[ 677.788355][T17952] blkdev_release+0x15/0x20
[ 677.790041][T17952] __fput+0x408/0xbb0
[ 677.791754][T17952] task_work_run+0x14e/0x250
[ 677.793714][T17952] syscall_exit_to_user_mode+0x27b/0x2a0
[ 677.796063][T17952] __do_fast_syscall_32+0x80/0x120
[ 677.798148][T17952] do_fast_syscall_32+0x32/0x80
[ 677.800206][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 677.802820][T17952]
[ 677.802820][T17952] -> #5 (&nbd->config_lock){+.+.}-{3:3}:
[ 677.805920][T17952] __mutex_lock+0x175/0x9c0
[ 677.807883][T17952] refcount_dec_and_mutex_lock+0x51/0xe0
[ 677.810346][T17952] nbd_config_put+0x31/0x750
[ 677.812420][T17952] nbd_release+0xb7/0x190
[ 677.814418][T17952] blkdev_put_whole+0xad/0xf0
[ 677.816522][T17952] bdev_release+0x496/0x6f0
[ 677.818652][T17952] blkdev_release+0x15/0x20
[ 677.820830][T17952] __fput+0x408/0xbb0
[ 677.822840][T17952] __fput_sync+0x47/0x50
[ 677.824928][T17952] __x64_sys_close+0x86/0x100
[ 677.827137][T17952] do_syscall_64+0xcd/0x250
[ 677.829260][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 677.831682][T17952]
[ 677.831682][T17952] -> #4 (&disk->open_mutex){+.+.}-{3:3}:
[ 677.834617][T17952] __mutex_lock+0x175/0x9c0
[ 677.836655][T17952] bdev_open+0x41a/0xe40
[ 677.838639][T17952] bdev_file_open_by_dev+0x17d/0x210
[ 677.840992][T17952] disk_scan_partitions+0x1ed/0x320
[ 677.843023][T17952] device_add_disk+0xfbb/0x12d0
[ 677.845241][T17952] pmem_attach_disk+0x9ab/0x13c0
[ 677.847530][T17952] nd_pmem_probe+0x1a9/0x1f0
[ 677.849662][T17952] nvdimm_bus_probe+0x169/0x5d0
[ 677.851895][T17952] really_probe+0x23e/0xa90
[ 677.853983][T17952] __driver_probe_device+0x1de/0x440
[ 677.856413][T17952] driver_probe_device+0x4c/0x1b0
[ 677.858656][T17952] __driver_attach+0x283/0x580
[ 677.860837][T17952] bus_for_each_dev+0x13c/0x1d0
[ 677.863040][T17952] bus_add_driver+0x2e9/0x690
[ 677.865135][T17952] driver_register+0x15c/0x4b0
[ 677.867132][T17952] __nd_driver_register+0x103/0x1a0
[ 677.869245][T17952] do_one_initcall+0x128/0x630
[ 677.871209][T17952] kernel_init_freeable+0x660/0xc50
[ 677.873466][T17952] kernel_init+0x1c/0x2b0
[ 677.875442][T17952] ret_from_fork+0x45/0x80
[ 677.877490][T17952] ret_from_fork_asm+0x1a/0x30
[ 677.879635][T17952]
[ 677.879635][T17952] -> #3 (&nvdimm_namespace_key){+.+.}-{3:3}:
[ 677.883040][T17952] __mutex_lock+0x175/0x9c0
[ 677.885200][T17952] uevent_show+0x188/0x3b0
[ 677.887298][T17952] dev_attr_show+0x53/0xe0
[ 677.889377][T17952] sysfs_kf_seq_show+0x223/0x3e0
[ 677.891581][T17952] seq_read_iter+0x4fa/0x12c0
[ 677.893639][T17952] kernfs_fop_read_iter+0x41a/0x590
[ 677.895977][T17952] vfs_read+0x869/0xbd0
[ 677.897913][T17952] ksys_read+0x12f/0x260
[ 677.899885][T17952] do_syscall_64+0xcd/0x250
SYZFAIL: failed to recv rpc
[ 677.901895][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 677.904815][T17952]
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 677.904815][T17952] -> #2 (kn->active#5){++++}-{0:0}:
[ 677.908083][T17952] kernfs_drain+0x48f/0x590
[ 677.910201][T17952] __kernfs_remove+0x281/0x670
[ 677.912370][T17952] kernfs_remove_by_name_ns+0xb2/0x130
[ 677.914760][T17952] device_del+0x381/0x9f0
[ 677.916191][T17952] unregister_netdevice_many_notify+0x103b/0x1e40
[ 677.918257][T17952] unregister_netdevice_queue+0x307/0x3f0
[ 677.920355][T17952] unregister_netdev+0x1c/0x30
[ 677.922545][T17952] slip_close+0x165/0x1c0
[ 677.924304][T17952] tty_ldisc_close+0x111/0x1a0
[ 677.926385][T17952] tty_ldisc_kill+0x8e/0x150
[ 677.928461][T17952] tty_ldisc_release+0x17b/0x2a0
[ 677.930562][T17952] tty_release_struct+0x23/0xe0
[ 677.932815][T17952] tty_release+0xe33/0x1420
[ 677.935135][T17952] __fput+0x408/0xbb0
[ 677.937067][T17952] task_work_run+0x14e/0x250
[ 677.939182][T17952] syscall_exit_to_user_mode+0x27b/0x2a0
[ 677.941704][T17952] __do_fast_syscall_32+0x80/0x120
[ 677.944089][T17952] do_fast_syscall_32+0x32/0x80
[ 677.946267][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 677.948817][T17952]
[ 677.948817][T17952] -> #1 (rtnl_mutex){+.+.}-{3:3}:
[ 677.951634][T17952] __mutex_lock+0x175/0x9c0
[ 677.953692][T17952] smc_vlan_by_tcpsk+0x251/0x620
[ 677.955992][T17952] __smc_connect+0x466/0x48f0
[ 677.958124][T17952] smc_connect+0x2fc/0x760
[ 677.960170][T17952] __sys_connect_file+0x15f/0x1a0
[ 677.962432][T17952] __sys_connect+0x149/0x170
[ 677.964482][T17952] __ia32_sys_connect+0x71/0xb0
[ 677.966631][T17952] __do_fast_syscall_32+0x73/0x120
[ 677.968703][T17952] do_fast_syscall_32+0x32/0x80
[ 677.970801][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 677.973597][T17952]
[ 677.973597][T17952] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}:
[ 677.976721][T17952] __lock_acquire+0x24ed/0x3cb0
[ 677.978943][T17952] lock_acquire+0x1b1/0x560
[ 677.981039][T17952] lock_sock_nested+0x3a/0xf0
[ 677.983035][T17952] smc_shutdown+0x65/0x800
[ 677.984907][T17952] nbd_mark_nsock_dead+0xae/0x5d0
[ 677.987290][T17952] sock_shutdown+0x17c/0x280
[ 677.989001][T17952] nbd_config_put+0x1e6/0x750
[ 677.990967][T17952] nbd_release+0xb7/0x190
[ 677.992791][T17952] blkdev_put_whole+0xad/0xf0
[ 677.994775][T17952] bdev_release+0x496/0x6f0
[ 677.996579][T17952] blkdev_release+0x15/0x20
[ 677.998516][T17952] __fput+0x408/0xbb0
[ 678.000217][T17952] task_work_run+0x14e/0x250
[ 678.002017][T17952] syscall_exit_to_user_mode+0x27b/0x2a0
[ 678.004326][T17952] __do_fast_syscall_32+0x80/0x120
[ 678.006710][T17952] do_fast_syscall_32+0x32/0x80
[ 678.009037][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 678.011965][T17952]
[ 678.011965][T17952] other info that might help us debug this:
[ 678.011965][T17952]
[ 678.016298][T17952] Chain exists of:
[ 678.016298][T17952] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock
[ 678.016298][T17952]
[ 678.021381][T17952] Possible unsafe locking scenario:
[ 678.021381][T17952]
[ 678.023795][T17952] CPU0 CPU1
[ 678.025921][T17952] ---- ----
[ 678.028176][T17952] lock(&nsock->tx_lock);
[ 678.030023][T17952] lock(&nbd->config_lock);
[ 678.032988][T17952] lock(&nsock->tx_lock);
[ 678.035860][T17952] lock(sk_lock-AF_SMC);
[ 678.037656][T17952]
[ 678.037656][T17952] *** DEADLOCK ***
[ 678.037656][T17952]
[ 678.040999][T17952] 3 locks held by syz.3.3287/17952:
[ 678.043186][T17952] #0: ffff88801f2fe4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x166/0x6f0
[ 678.047269][T17952] #1: ffff88801f2f7998 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x51/0xe0
[ 678.051740][T17952] #2: ffff888057051870 (&nsock->tx_lock){+.+.}-{3:3}, at: sock_shutdown+0x16f/0x280
[ 678.055791][T17952]
[ 678.055791][T17952] stack backtrace:
[ 678.057621][T17952] CPU: 0 PID: 17952 Comm: syz.3.3287 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0
[ 678.061493][T17952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 678.065685][T17952] Call Trace:
[ 678.067102][T17952] <TASK>
[ 678.068344][T17952] dump_stack_lvl+0x116/0x1f0
[ 678.070328][T17952] check_noncircular+0x31a/0x400
[ 678.072425][T17952] ? __pfx_check_noncircular+0x10/0x10
[ 678.074691][T17952] ? __switch_to+0x749/0x1180
[ 678.076655][T17952] ? lockdep_lock+0x1b8/0x200
[ 678.078636][T17952] ? __pfx_lockdep_lock+0x10/0x10
[ 678.080759][T17952] __lock_acquire+0x24ed/0x3cb0
[ 678.082804][T17952] ? __pfx___lock_acquire+0x10/0x10
[ 678.084970][T17952] lock_acquire+0x1b1/0x560
[ 678.086893][T17952] ? smc_shutdown+0x65/0x800
[ 678.088868][T17952] ? __pfx_lock_acquire+0x10/0x10
[ 678.090967][T17952] ? __mutex_lock+0x2cc/0x9c0
[ 678.092919][T17952] ? sock_shutdown+0x16f/0x280
[ 678.094915][T17952] ? lock_acquire+0x1b1/0x560
[ 678.096852][T17952] lock_sock_nested+0x3a/0xf0
[ 678.098559][T17952] ? smc_shutdown+0x65/0x800
[ 678.100094][T17952] smc_shutdown+0x65/0x800
[ 678.101664][T17952] ? nbd_config_put+0xe3/0x750
[ 678.103678][T17952] nbd_mark_nsock_dead+0xae/0x5d0
[ 678.105607][T17952] sock_shutdown+0x17c/0x280
[ 678.107667][T17952] nbd_config_put+0x1e6/0x750
[ 678.109605][T17952] nbd_release+0xb7/0x190
[ 678.111443][T17952] ? __pfx_nbd_release+0x10/0x10
[ 678.113505][T17952] blkdev_put_whole+0xad/0xf0
[ 678.115424][T17952] bdev_release+0x496/0x6f0
[ 678.117078][T17952] ? evm_file_release+0xd6/0x1d0
[ 678.119152][T17952] ? __pfx_blkdev_release+0x10/0x10
[ 678.121312][T17952] blkdev_release+0x15/0x20
[ 678.122966][T17952] __fput+0x408/0xbb0
[ 678.124400][T17952] task_work_run+0x14e/0x250
[ 678.126342][T17952] ? __pfx_task_work_run+0x10/0x10
[ 678.128507][T17952] ? __pfx___close_range+0x10/0x10
[ 678.130692][T17952] syscall_exit_to_user_mode+0x27b/0x2a0
[ 678.133088][T17952] __do_fast_syscall_32+0x80/0x120
[ 678.135269][T17952] do_fast_syscall_32+0x32/0x80
[ 678.136984][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 678.139418][T17952] RIP: 0023:0xf7fb8579
[ 678.140709][T17952] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 678.148096][T17952] RSP: 002b:00000000ffe31cac EFLAGS: 00000202 ORIG_RAX: 00000000000001b4
[ 678.151660][T17952] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e
[ 678.155002][T17952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 678.158419][T17952] RBP: 00000000000004e0 R08: 0000000000000000 R09: 0000000000000000
[ 678.161685][T17952] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 678.165008][T17952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 678.168288][T17952] </TASK>
[ 678.224583][T17952] block nbd3: shutting down sockets
[ 679.249793][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 679.329736][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 679.408858][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 679.553064][ T13] bridge_slave_1: left allmulticast mode
[ 679.555416][ T13] bridge_slave_1: left promiscuous mode
[ 679.557686][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 679.562368][ T13] bridge_slave_0: left allmulticast mode
[ 679.565583][ T13] bridge_slave_0: left promiscuous mode
[ 679.568050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 679.705080][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 679.709621][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 679.713288][ T13] bond0 (unregistering): Released all slaves
[ 680.128510][ T13] hsr_slave_0: left promiscuous mode
[ 680.131420][ T13] hsr_slave_1: left promiscuous mode
[ 680.134995][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 680.138638][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 680.142506][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 680.146035][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 680.151649][ T13] veth1_macvtap: left promiscuous mode
[ 680.155754][ T13] veth0_macvtap: left promiscuous mode
[ 680.157970][ T13] veth1_vlan: left promiscuous mode
[ 680.160052][ T13] veth0_vlan: left promiscuous mode
[ 680.450483][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 680.509216][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 681.275597][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 681.400289][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 681.578975][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 681.692608][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 681.827864][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 681.889888][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 681.973938][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 682.099480][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 682.241570][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 682.330719][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 682.557770][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 682.618730][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 682.784854][ T13] bridge_slave_1: left allmulticast mode
[ 682.787035][ T13] bridge_slave_1: left promiscuous mode
[ 682.789322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 682.793951][ T13] bridge_slave_0: left allmulticast mode
[ 682.796662][ T13] bridge_slave_0: left promiscuous mode
[ 682.798910][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 682.805525][ T13] bridge_slave_1: left allmulticast mode
[ 682.807922][ T13] bridge_slave_1: left promiscuous mode
[ 682.810322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 682.816995][ T13] bridge_slave_0: left allmulticast mode
[ 682.819276][ T13] bridge_slave_0: left promiscuous mode
[ 682.821645][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 682.827615][ T13] bridge_slave_1: left allmulticast mode
[ 682.829882][ T13] bridge_slave_1: left promiscuous mode
[ 682.831930][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 682.836008][ T13] bridge_slave_0: left allmulticast mode
[ 682.838272][ T13] bridge_slave_0: left promiscuous mode
[ 682.840606][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 683.055607][ T13] dvmrp0 (unregistering): left allmulticast mode
[ 683.599831][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 683.605199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 683.609460][ T13] bond0 (unregistering): Released all slaves
[ 683.621002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 683.626391][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 683.631051][ T13] bond0 (unregistering): Released all slaves
[ 683.641868][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 683.646829][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 683.651181][ T13] bond0 (unregistering): Released all slaves
[ 684.421436][ T13] hsr_slave_0: left promiscuous mode
[ 684.425376][ T13] hsr_slave_1: left promiscuous mode
[ 684.428033][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 684.430889][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 684.434077][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 684.437042][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 684.442908][ T13] hsr_slave_0: left promiscuous mode
[ 684.445532][ T13] hsr_slave_1: left promiscuous mode
[ 684.448225][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 684.451028][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 684.454423][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 684.457222][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 684.462855][ T13] hsr_slave_0: left promiscuous mode
[ 684.465593][ T13] hsr_slave_1: left promiscuous mode
[ 684.468198][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 684.470993][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 684.477238][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 684.480050][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 684.486636][ T13] veth1_macvtap: left promiscuous mode
[ 684.488803][ T13] veth0_macvtap: left promiscuous mode
[ 684.491006][ T13] veth1_vlan: left promiscuous mode
[ 684.493030][ T13] veth0_vlan: left promiscuous mode
[ 684.496760][ T13] veth1_macvtap: left promiscuous mode
[ 684.498917][ T13] veth0_macvtap: left promiscuous mode
[ 684.501131][ T13] veth1_vlan: left promiscuous mode
[ 684.503182][ T13] veth0_vlan: left promiscuous mode
[ 684.506536][ T13] veth1_macvtap: left promiscuous mode
[ 684.508624][ T13] veth0_macvtap: left allmulticast mode
[ 684.510733][ T13] veth0_macvtap: left promiscuous mode
[ 684.513071][ T13] veth1_vlan: left promiscuous mode
[ 684.515569][ T13] veth0_vlan: left promiscuous mode
[ 684.893999][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 684.990727][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 685.368735][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 685.414630][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 685.850637][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 685.896478][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 686.099419][ T1355] ieee802154 phy0 wpan0: encryption failed: -22
[ 686.101674][ T1355] ieee802154 phy1 wpan1: encryption failed: -22
VM DIAGNOSIS:
15:19:24 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84f8aec5 RDI=ffffffff94dc1380 RBP=ffffffff94dc1340 RSP=ffffc90003e573b8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e30312e36
R12=0000000000000000 R13=0000000000000033 R14=ffffffff84f8ae60 R15=0000000000000000
RIP=ffffffff84f8aeef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f5af1da4 CR3=0000000050edc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000300000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
CPU#1
RAX=ffffffff88b57084 RBX=ffffc9000772f4f8 RCX=1ffff92000ee5ea8 RDX=dffffc0000000000
RSI=ffffffff813c7249 RDI=ffffc9000772faf8 RBP=0000000000000001 RSP=ffffc9000772f478
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffffff9100793a R13=ffffc9000772fb00 R14=ffffffff9100793e R15=0000000000000001
RIP=ffffffff813c8be9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57fa6c6280 ffffffff 00c00000
GS =0000 ffff88802c100000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020513000 CR3=00000000215b4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020
Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7bc2dae0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000061 000055fd3cf48600 44455a494c414954 494e495f43455355
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 0000000000000000 000000003130323a 356963682f356963
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b1646b6ffcd35eb 000055f863205f33 0000000000000251 0000000036386c6c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57fa3f2220 00007f57fa3f2220 0000000000005c01 0030003177617264
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffbb33e77ffdfd 332c75fd7ff7ffb7 7b567dfffffffffc 7f6d7fffff6eefff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 00164663682f3574 00004e4f53204552
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 000046633c2f3570 00004e4f53204531
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2
CPU#2
RAX=0000000000000002 RBX=ffff888015088000 RCX=ffffc9002c0d0000 RDX=0000000000040000
RSI=ffffffff8473a6fc RDI=ffff888015088000 RBP=ffff888015088000 RSP=ffffc900037a7c00
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=dffffc0000000000 R13=ffff888015088410 R14=0000000000000000 R15=ffff8880150882d0
RIP=ffffffff818ae745 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT= fffffe000008f000 0000007f
IDT= fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f77434 CR3=00000000198c8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3
CPU#3
RAX=dffffc0000000000 RBX=ffffffff8175c758 RCX=1ffffffff29671cc RDX=0000000000000000
RSI=ffffffff8175c74e RDI=ffff8880209714c8 RBP=ffff888020970000 RSP=ffffc90003bf7b60
R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000080 R11=0000000000000000
R12=0000000000000017 R13=ffff888028e4c510 R14=0000000000000077 R15=ffff88805621e111
RIP=ffffffff815b4b03 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT= fffffe00000d6000 0000007f
IDT= fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f75000 CR3=000000006876e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffff0000 ffffff0000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000