last executing test programs: 7.509965376s ago: executing program 0 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r5, 0x12}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000140)={0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r7, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) write$tcp_congestion(r3, 0x0, 0x0) 6.21417557s ago: executing program 0 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003b00), 0x3, 0x8896) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() 4.999414546s ago: executing program 0 (id=1088): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0x4) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1d, 0x12, 0x0, 0x0, 0x9, 0x12, &(0x7f0000000700)=""/18, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x0, 0x0, 0x5}, {0x4}, {0x4, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x4}, {0x1, 0x1, 0x0, 0x5}], 0x10, 0x8001, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) mlock(&(0x7f000000b000/0x4000)=nil, 0x4000) fsopen(0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40046208, 0x0) 4.660271047s ago: executing program 3 (id=1092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r3, 0xffffffffffffffff}, &(0x7f0000002480), &(0x7f00000024c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000200), &(0x7f0000000040)=@udp=r1}, 0x20) shutdown(r2, 0x0) 4.580105473s ago: executing program 3 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 4.497933193s ago: executing program 2 (id=1096): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120) 4.399441409s ago: executing program 3 (id=1097): socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$packet(0x11, 0x3, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) pselect6(0x71, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 4.398919214s ago: executing program 2 (id=1098): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffa, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0xffffffff}, 0xc) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000140)=0x14, 0x100800) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x12001, 0x0, 0x0, 0x1, 0xda3}, 0x1c) socket(0x8, 0x5, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @multicast1}], 0x10) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000000)="0048000000ff0000a15089a3e56118535ec8313a9f20e2e0", 0x18) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x4, 0x20000002, 0x4) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000200)=0x9fd, 0x4) tkill(r6, 0xb) 3.519195455s ago: executing program 3 (id=1101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5bffff000091235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xfffffe54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 3.390010648s ago: executing program 3 (id=1102): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x98}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) socket$inet(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xe0983, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r5, 0x0, 0x80, &(0x7f0000000140)="7d1d4f8c", 0x4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000306010300000000000000000a0000080900020073797a3100000000090002de116e4fa9393489000500010007000000"], 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000c05000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.810062155s ago: executing program 1 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.749220299s ago: executing program 1 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) 2.640009047s ago: executing program 1 (id=1105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x400) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1.21118239s ago: executing program 2 (id=1106): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.084548602s ago: executing program 2 (id=1107): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r1, &(0x7f0000007700)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) 1.020252235s ago: executing program 1 (id=1108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) semget$private(0x0, 0x0, 0x0) 929.775108ms ago: executing program 1 (id=1109): socket$inet6(0xa, 0x1, 0x800006) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000000000600be0010d800000600bd00"], 0x68}}, 0x0) 928.618606ms ago: executing program 2 (id=1110): socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$packet(0x11, 0x3, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) pselect6(0x71, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 789.865545ms ago: executing program 1 (id=1111): r0 = socket$inet(0x2, 0x2, 0x1) syz_open_dev$video4linux(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40046104, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x2, 0x52b, 0x3}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) io_setup(0x93, &(0x7f00000000c0)=0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @win={{0x86fb, 0x8, 0x1b, 0xbe13}, 0x1, 0x2, &(0x7f0000000440)={{0x6, 0xf, 0x2006, 0x7fff}, &(0x7f00000002c0)={{0x9, 0x5, 0x10001, 0x2}, &(0x7f0000000280)={{0x70, 0x8d, 0xfffffffd, 0xffff1f8d}}}}, 0x3, &(0x7f0000000600)="702794d42b903a5a2eb2483f771f7b7143a4b19682825d13e92c363a79e710b74df49927f78da4ca880f2d6bbaf1db8ed2e08c11506b352347d5d12db1c72ce9bb0ed7b82ed89278b4da5578836f4780327054aa3fe56acd228cef4bb912eb8528266d00d257e5e799778883f1172579cbed1825e29cf5e36d37c300e4e45f4940fde1a029275450511003ab7d1146ae30f9d200fbfcb6e2875e4027a3222f45f4918d2c78a1473d863161d7a325cbd5fb1978877a39e2c48113ebc2da03fc4c8720b56d96e909a7aa26f4d0b899d652fc6ae4ef30c41859b844786e8310", 0x1}}) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 479.495552ms ago: executing program 0 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 328.455812ms ago: executing program 0 (id=1113): socket$alg(0x26, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000280)={{@local, 0x4}, @local, 0x0, 0x0, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7}) close_range(r1, 0xffffffffffffffff, 0x0) 241.659991ms ago: executing program 3 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0xba) connect$vsock_stream(r4, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_io_uring_setup(0x7c08, &(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x208, 0x7, 0x3}, &(0x7f0000000100)=0x10) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xc8, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty}}, 0x5c) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r5]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x0, &(0x7f0000000340)) 108.80241ms ago: executing program 0 (id=1115): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/13, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 2 (id=1116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x400) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf, @void, @value, @void, @value}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62754' (ED25519) to the list of known hosts. [ 58.918650][ T5339] cgroup: Unknown subsys name 'net' [ 59.091949][ T5339] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.409292][ T5339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.390405][ T5361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.395940][ T5361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.400160][ T5361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.405207][ T5361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.407254][ T5370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.408963][ T5361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.412646][ T5370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.415406][ T5361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.418566][ T5370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.423553][ T5363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.425950][ T5370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.430871][ T5370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.433280][ T5365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.438948][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.439479][ T5363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.442049][ T5365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.446942][ T5363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.450403][ T5365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.452318][ T5363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.455818][ T5365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.458236][ T5363] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.461665][ T5365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.464297][ T5363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.466825][ T5365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.892185][ T5364] chnl_net:caif_netlink_parms(): no params data found [ 66.920543][ T5353] chnl_net:caif_netlink_parms(): no params data found [ 66.932314][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 67.021510][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 67.269193][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.273564][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.276984][ T5364] bridge_slave_0: entered allmulticast mode [ 67.281001][ T5364] bridge_slave_0: entered promiscuous mode [ 67.317440][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.320809][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.323876][ T5364] bridge_slave_1: entered allmulticast mode [ 67.327551][ T5364] bridge_slave_1: entered promiscuous mode [ 67.523831][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.526630][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.529567][ T5353] bridge_slave_0: entered allmulticast mode [ 67.534512][ T5353] bridge_slave_0: entered promiscuous mode [ 67.539224][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.542546][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.545580][ T5352] bridge_slave_0: entered allmulticast mode [ 67.549132][ T5352] bridge_slave_0: entered promiscuous mode [ 67.587841][ T5364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.595289][ T5364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.599526][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.603077][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.605655][ T5353] bridge_slave_1: entered allmulticast mode [ 67.608215][ T5353] bridge_slave_1: entered promiscuous mode [ 67.611054][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.613572][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.616300][ T5352] bridge_slave_1: entered allmulticast mode [ 67.623323][ T5352] bridge_slave_1: entered promiscuous mode [ 67.626846][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.630131][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.633173][ T5354] bridge_slave_0: entered allmulticast mode [ 67.637297][ T5354] bridge_slave_0: entered promiscuous mode [ 67.753715][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.757049][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.759998][ T5354] bridge_slave_1: entered allmulticast mode [ 67.763640][ T5354] bridge_slave_1: entered promiscuous mode [ 67.773863][ T5364] team0: Port device team_slave_0 added [ 67.895823][ T5364] team0: Port device team_slave_1 added [ 67.936526][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.961324][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.969456][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.003756][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.010768][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.017716][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.056093][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.058930][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.070680][ T5364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.168281][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.171384][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.182060][ T5364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.245911][ T5352] team0: Port device team_slave_0 added [ 68.254879][ T5354] team0: Port device team_slave_0 added [ 68.264623][ T5354] team0: Port device team_slave_1 added [ 68.270493][ T5353] team0: Port device team_slave_0 added [ 68.274831][ T5352] team0: Port device team_slave_1 added [ 68.372499][ T5353] team0: Port device team_slave_1 added [ 68.438248][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.442424][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.454879][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.470377][ T5365] Bluetooth: hci1: command tx timeout [ 68.492817][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.495665][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.513225][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.540608][ T67] Bluetooth: hci3: command tx timeout [ 68.542762][ T5365] Bluetooth: hci0: command tx timeout [ 68.543400][ T5356] Bluetooth: hci2: command tx timeout [ 68.558604][ T5364] hsr_slave_0: entered promiscuous mode [ 68.563715][ T5364] hsr_slave_1: entered promiscuous mode [ 68.570393][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.573931][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.586695][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.626647][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.631151][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.643886][ T5353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.650369][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.653503][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.666565][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.707053][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.710152][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.721305][ T5353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.772809][ T5352] hsr_slave_0: entered promiscuous mode [ 68.776519][ T5352] hsr_slave_1: entered promiscuous mode [ 68.779941][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.783768][ T5352] Cannot create hsr debugfs directory [ 68.972019][ T5354] hsr_slave_0: entered promiscuous mode [ 68.975757][ T5354] hsr_slave_1: entered promiscuous mode [ 68.979439][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.983412][ T5354] Cannot create hsr debugfs directory [ 69.118007][ T5353] hsr_slave_0: entered promiscuous mode [ 69.127099][ T5353] hsr_slave_1: entered promiscuous mode [ 69.131231][ T5353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.133880][ T5353] Cannot create hsr debugfs directory [ 69.595584][ T5352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.614415][ T5352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.632260][ T5352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.665260][ T5352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.673006][ T5353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.683196][ T5353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.698400][ T5353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.708277][ T5353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.830866][ T5364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.837733][ T5364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.863423][ T5364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.897985][ T5364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.961986][ T5354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.971946][ T5354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.979339][ T5354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.013311][ T5354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.041629][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.119522][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.137162][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.140855][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.156422][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.178287][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.181235][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.214154][ T5353] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.286158][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.292357][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.295492][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.335831][ T5364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.340539][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.343998][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.385227][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.396988][ T5364] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.415051][ T5352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.429042][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.432774][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.438419][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.441437][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.463813][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.467473][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.495262][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.498346][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.543863][ T5356] Bluetooth: hci1: command tx timeout [ 70.616455][ T5364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.621244][ T5356] Bluetooth: hci0: command tx timeout [ 70.631414][ T5356] Bluetooth: hci2: command tx timeout [ 70.633365][ T5365] Bluetooth: hci3: command tx timeout [ 70.682267][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.741821][ T5353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.768034][ T5352] veth0_vlan: entered promiscuous mode [ 70.812719][ T5352] veth1_vlan: entered promiscuous mode [ 70.828836][ T5353] veth0_vlan: entered promiscuous mode [ 70.856428][ T5364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.868401][ T5353] veth1_vlan: entered promiscuous mode [ 70.896501][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.930700][ T5352] veth0_macvtap: entered promiscuous mode [ 70.942406][ T5352] veth1_macvtap: entered promiscuous mode [ 70.976685][ T5353] veth0_macvtap: entered promiscuous mode [ 70.985743][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.009997][ T5353] veth1_macvtap: entered promiscuous mode [ 71.020640][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.025493][ T5354] veth0_vlan: entered promiscuous mode [ 71.039339][ T5364] veth0_vlan: entered promiscuous mode [ 71.050299][ T5352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.053659][ T5352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.057069][ T5352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.061478][ T5352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075547][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.083039][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.088905][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.105608][ T5354] veth1_vlan: entered promiscuous mode [ 71.110645][ T5364] veth1_vlan: entered promiscuous mode [ 71.139892][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.144507][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.150284][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.157561][ T5353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.162541][ T5353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.166554][ T5353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.170562][ T5353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.210529][ T5364] veth0_macvtap: entered promiscuous mode [ 71.228443][ T5364] veth1_macvtap: entered promiscuous mode [ 71.287945][ T5354] veth0_macvtap: entered promiscuous mode [ 71.301925][ T5354] veth1_macvtap: entered promiscuous mode [ 71.306311][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.311491][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.316363][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.319341][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.330077][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.334885][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.338996][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.345652][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.351528][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.360562][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.364826][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.369174][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.374293][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.378507][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.383295][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.388222][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.402485][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.407239][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.412713][ T5364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.417120][ T5364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.429140][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.443519][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.448109][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.453473][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.458178][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.463242][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.467945][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.474169][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.486873][ T5354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.491709][ T5354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.496484][ T5354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.500944][ T5354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.512927][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.516234][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.520476][ T5364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524045][ T5364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.527495][ T5364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.532164][ T5364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.566737][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.571316][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.752174][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.755698][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.795229][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.795909][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.798646][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.806939][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.839303][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.843482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.635538][ T5365] Bluetooth: hci1: command tx timeout [ 72.699787][ T5365] Bluetooth: hci2: command tx timeout [ 72.700057][ T5356] Bluetooth: hci0: command tx timeout [ 72.710836][ T5356] Bluetooth: hci3: command tx timeout [ 72.940017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.653152][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.852397][ T35] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.889734][ T35] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.898336][ T35] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.905478][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.948790][ T5440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.965093][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.585527][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.700395][ T5356] Bluetooth: hci1: command tx timeout [ 74.744705][ T5464] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.754378][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.758318][ T5464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.779977][ T5356] Bluetooth: hci2: command tx timeout [ 74.780002][ T5365] Bluetooth: hci3: command tx timeout [ 74.780924][ T67] Bluetooth: hci0: command tx timeout [ 74.928635][ T25] usb 7-1: USB disconnect, device number 2 [ 75.670083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.750632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.261111][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 76.275897][ T5480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.717317][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.720864][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.806965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.810055][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.878723][ T5451] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.032058][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.037084][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.042123][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.049009][ T58] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 77.056067][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.080135][ T58] usb 5-1: config 0 descriptor?? [ 77.089722][ T5451] usb 7-1: Using ep0 maxpacket: 32 [ 77.097203][ T5451] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.107709][ T5451] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.114967][ T5451] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.130683][ T5451] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.138009][ T5451] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.143808][ T5451] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 77.151200][ T5451] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.156949][ T5451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.161886][ T5451] usb 7-1: Product: syz [ 77.164553][ T5451] usb 7-1: Manufacturer: syz [ 77.167663][ T5451] usb 7-1: SerialNumber: syz [ 77.189953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.271293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.341476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.527891][ T5451] cdc_ncm 7-1:1.0: bind() failure [ 77.545978][ T5451] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 77.555513][ T5451] cdc_ncm 7-1:1.1: bind() failure [ 77.563310][ T5451] usb 7-1: USB disconnect, device number 3 [ 77.629746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.060366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 78.239690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 78.701750][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 78.704016][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 78.721086][ T58] usb 5-1: USB disconnect, device number 2 [ 79.149250][ T5498] input: syz0 as /devices/virtual/input/input5 [ 79.657216][ T5507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 80.299563][ T5511] ptrace attach of "/syz-executor exec"[5364] was attempted by "/syz-executor exec"[5511] [ 82.658375][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 83.317427][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 83.980896][ T5560] netlink: 'syz.0.38': attribute type 6 has an invalid length. [ 84.359780][ T5398] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 84.547941][ T5398] usb 8-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 84.562710][ T5398] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.569889][ T5398] usb 8-1: Product: syz [ 84.579325][ T5398] usb 8-1: Manufacturer: syz [ 84.587529][ T5398] usb 8-1: SerialNumber: syz [ 84.617825][ T5398] usb 8-1: config 0 descriptor?? [ 84.665628][ T5398] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 84.669747][ T5398] usbduxfast 8-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 84.781106][ T5365] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 84.785185][ T5365] Bluetooth: hci2: Injecting HCI hardware error event [ 84.789824][ T5365] Bluetooth: hci2: hardware error 0x00 [ 84.850027][ T5398] usb 8-1: USB disconnect, device number 2 [ 84.923754][ T5578] netlink: 'syz.1.45': attribute type 2 has an invalid length. [ 84.927145][ T5578] netlink: 150440 bytes leftover after parsing attributes in process `syz.1.45'. [ 86.011188][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 86.860256][ T5365] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 86.949970][ T2789] cfg80211: failed to load regulatory.db [ 87.189220][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 87.229901][ T5606] hsr0: entered promiscuous mode [ 87.778819][ T58] libceph: connect (1)[c::]:6789 error -101 [ 87.784409][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 88.041199][ T58] libceph: connect (1)[c::]:6789 error -101 [ 88.044740][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 88.544036][ T5612] ceph: No mds server is up or the cluster is laggy [ 88.552381][ T58] libceph: connect (1)[c::]:6789 error -101 [ 88.555218][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 89.078838][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 90.042486][ T5648] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 91.634218][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 92.711010][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.422004][ T5701] tmpfs: Bad value for 'mpol' [ 93.652096][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 93.657209][ T5703] netlink: 'syz.1.81': attribute type 15 has an invalid length. [ 93.945542][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 94.733603][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 95.498804][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 95.549693][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.739660][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 95.753600][ T58] usb 5-1: config 0 has no interfaces? [ 95.763480][ T58] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 95.767537][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.780042][ T58] usb 5-1: Product: syz [ 95.781911][ T58] usb 5-1: Manufacturer: syz [ 95.783974][ T58] usb 5-1: SerialNumber: syz [ 95.790952][ T58] usb 5-1: config 0 descriptor?? [ 96.222542][ T5746] netlink: 160 bytes leftover after parsing attributes in process `syz.1.96'. [ 96.576823][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 97.033242][ T5756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.177254][ T5357] usb 5-1: USB disconnect, device number 3 [ 99.534936][ T5783] [U] [ 99.536484][ T5783] [U] [ 99.537764][ T5783] [U] [ 99.539046][ T5783] [U] [ 99.544335][ T5783] [U] [ 99.545592][ T5783] [U] [ 99.546561][ T5783] [U] [ 99.547558][ T5783] [U] [ 99.548638][ T5783] [U] [ 99.549773][ T5783] [U] [ 99.550919][ T5783] [U] [ 99.574770][ T5782] [U] [ 100.014983][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.418104][ T5815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.116'. [ 101.433511][ T5815] Bluetooth: MGMT ver 1.23 [ 101.667074][ T5819] binder: 5816:5819 ioctl 4018620d 0 returned -22 [ 103.075630][ T2789] IPVS: starting estimator thread 0... [ 103.102290][ T5833] vcan0: entered allmulticast mode [ 103.111126][ T5833] vcan0: left allmulticast mode [ 103.185409][ T5834] IPVS: using max 17 ests per chain, 40800 per kthread [ 105.985172][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 107.854000][ T5885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 107.869646][ T5451] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.070394][ T5451] usb 5-1: New USB device found, idVendor=0403, idProduct=a54a, bcdDevice= 3.8c [ 108.073676][ T5451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.077016][ T5451] usb 5-1: Product: syz [ 108.078715][ T5451] usb 5-1: Manufacturer: syz [ 108.080983][ T5451] usb 5-1: SerialNumber: syz [ 108.085465][ T5451] usb 5-1: config 0 descriptor?? [ 108.098785][ T5451] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 108.107318][ T5451] ftdi_sio ttyUSB0: unknown device type: 0x38c [ 108.173797][ T5893] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 108.321884][ T5357] usb 5-1: USB disconnect, device number 4 [ 108.330995][ T5357] ftdi_sio 5-1:0.0: device disconnected [ 109.059630][ T39] audit: type=1326 audit(1725952930.904:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.0.142" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x0 [ 109.229409][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 109.606148][ T5910] syz.1.144[5910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.606292][ T5910] syz.1.144[5910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.693354][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.145'. [ 110.106631][ T5923] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET) [ 110.319839][ T5924] mac80211_hwsim hwsim5 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 110.815320][ T5926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.316746][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 111.338825][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 111.900090][ T5365] Bluetooth: hci3: command tx timeout [ 112.366425][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.383067][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 112.414927][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 112.813971][ T5962] netlink: 248 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.832379][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 113.991163][ T57] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 114.056422][ T5988] [U] [ 114.057809][ T5988] [U] [ 114.058920][ T5988] [U] [ 114.060043][ T5988] [U] [ 114.063012][ T5365] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 114.066825][ T5365] Bluetooth: hci1: Injecting HCI hardware error event [ 114.076518][ T5365] Bluetooth: hci1: hardware error 0x00 [ 114.085797][ T5988] [U] [ 114.087074][ T5988] [U] [ 114.088211][ T5988] [U] [ 114.089351][ T5988] [U] [ 114.090800][ T5988] [U] [ 114.092062][ T5988] [U] [ 114.093254][ T5988] [U] [ 114.100014][ T5987] [U] [ 114.196154][ T57] usb 7-1: config 0 has no interfaces? [ 114.198861][ T57] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 114.216042][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.243196][ T57] usb 7-1: config 0 descriptor?? [ 114.577374][ T35] usb 7-1: USB disconnect, device number 4 [ 115.233485][ T6010] [U] [ 115.234661][ T6010] [U] [ 115.235835][ T6010] [U] [ 115.236890][ T6010] [U] [ 115.238866][ T6010] [U] [ 115.239973][ T6010] [U] [ 115.241115][ T6010] [U] [ 115.242300][ T6010] [U] [ 115.248036][ T6010] [U] [ 115.249238][ T6010] [U] [ 115.250421][ T6010] [U] [ 115.271598][ T6009] [U] [ 115.367359][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 116.140547][ T5365] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 116.650949][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 116.830558][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 116.834758][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 116.839236][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 116.847537][ T25] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 116.859845][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.872057][ T25] usb 7-1: config 0 descriptor?? [ 116.945651][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 117.255149][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 117.269839][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.290730][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.534450][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.547118][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.583572][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.593664][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.608150][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.634344][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.641387][ T25] hid (null): bogus close delimiter [ 117.649144][ T25] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 117.681473][ T25] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 117.698210][ T25] hid-generic 0003:0158:0100.0003: bogus close delimiter [ 117.701933][ T25] hid-generic 0003:0158:0100.0003: item 0 0 2 10 parsing failed [ 117.706155][ T25] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 117.740786][ T5365] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 117.745255][ T5365] Bluetooth: hci0: Injecting HCI hardware error event [ 117.750239][ T5356] Bluetooth: hci0: hardware error 0x00 [ 117.992710][ T5523] usb 7-1: USB disconnect, device number 5 [ 118.707038][ T6059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.786743][ T6059] netlink: 'syz.2.197': attribute type 9 has an invalid length. [ 118.803688][ T6059] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.197'. [ 119.250866][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 119.430702][ C2] vkms_vblank_simulate: vblank timer overrun [ 119.826967][ T5356] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 120.140848][ T6085] [U] [ 120.142298][ T6085] [U] [ 120.143585][ T6085] [U] [ 120.144852][ T6085] [U] [ 120.149861][ T6085] [U] [ 120.151094][ T6085] [U] [ 120.152197][ T6085] [U] [ 120.153493][ T6085] [U] [ 120.154713][ T6085] [U] [ 120.155946][ T6085] [U] [ 120.157187][ T6085] [U] [ 120.170901][ T6084] [U] [ 120.719795][ T6101] usb usb9: usbfs: process 6101 (syz.1.204) did not claim interface 0 before use [ 120.724074][ T6101] usb usb9: selecting invalid altsetting 21783 [ 122.477724][ T6116] [U] [ 122.479013][ T6116] [U] [ 122.488422][ T6116] [U] [ 122.489607][ T6116] [U] [ 122.495511][ T6116] [U] [ 122.496955][ T6116] [U] [ 122.498228][ T6116] [U] [ 122.499488][ T6116] [U] [ 122.508203][ T6116] [U] [ 122.509687][ T6116] [U] [ 122.511870][ T6116] [U] [ 122.516410][ T6115] [U] [ 123.666735][ C2] vkms_vblank_simulate: vblank timer overrun [ 123.759719][ T1417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.828677][ T6136] "syz.2.219" (6136) uses obsolete ecb(arc4) skcipher [ 123.961724][ T1417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.968681][ T1417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.986799][ T1417] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.993091][ T1417] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.012790][ T1417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.018110][ T1417] usb 6-1: config 0 descriptor?? [ 124.464238][ T1417] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 124.468977][ T1417] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 124.503558][ T1417] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.675711][ T6151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 124.878294][ T6155] Zero length message leads to an empty skb [ 125.370825][ T39] audit: type=1326 audit(1725952947.224:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.2.231" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x0 [ 125.798770][ T6127] usb 6-1: USB disconnect, device number 2 [ 126.559687][ T6127] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.765521][ T6127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 126.770080][ T6127] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 126.784907][ T6127] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 126.817278][ T6127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.834896][ T6127] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 126.838283][ T6127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.844581][ T6127] usb 5-1: Product: syz [ 126.846485][ T6127] usb 5-1: Manufacturer: syz [ 126.848552][ T6127] usb 5-1: SerialNumber: syz [ 126.866283][ T6127] usb 5-1: config 0 descriptor?? [ 126.869778][ T5356] Bluetooth: hci3: command tx timeout [ 126.876974][ T6127] redrat3 5-1:0.0: Couldn't find all endpoints [ 127.093233][ T6127] usb 5-1: USB disconnect, device number 5 [ 127.134735][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 128.021025][ T39] audit: type=1326 audit(1725952949.874:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.068366][ T39] audit: type=1326 audit(1725952949.914:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.068509][ T6237] ubi0: attaching mtd0 [ 128.091518][ T39] audit: type=1326 audit(1725952949.914:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.104394][ T39] audit: type=1326 audit(1725952949.914:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.104397][ T6237] ubi0: scanning is finished [ 128.104438][ T39] audit: type=1326 audit(1725952949.914:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.125135][ T39] audit: type=1326 audit(1725952949.924:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.136264][ T39] audit: type=1326 audit(1725952949.924:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.147771][ T39] audit: type=1326 audit(1725952949.924:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.149978][ T6237] ubi0: empty MTD device detected [ 128.156994][ T39] audit: type=1326 audit(1725952949.924:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.254" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x7ffc0000 [ 128.300718][ T6237] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.307886][ T6237] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.312090][ T6237] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.315432][ T6237] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 128.318965][ T6237] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.341890][ T6237] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.345275][ T6237] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2897241033 [ 128.349387][ T6237] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.356577][ T6245] ubi0: background thread "ubi_bgt0d" started, PID 6245 [ 128.576826][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 128.967230][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 129.396469][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 129.673725][ T6280] [U] [ 129.675034][ T6280] [U] [ 129.676224][ T6280] [U] [ 129.677413][ T6280] [U] [ 129.678733][ T6280] [U] [ 129.679971][ T6280] [U] [ 129.681162][ T6280] [U] [ 129.682335][ T6280] [U] [ 129.693456][ T6280] [U] [ 129.694758][ T6280] [U] [ 129.696006][ T6280] [U] [ 129.698667][ T6279] [U] [ 129.822891][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 129.842842][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.274'. [ 130.129804][ T5523] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.322144][ T5523] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 130.327637][ T5523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.332862][ T5523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.337356][ T5523] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 130.344191][ T5523] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 130.348313][ T5523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.357016][ T5523] usb 5-1: config 0 descriptor?? [ 130.498798][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 130.696550][ T6320] [U] [ 130.698276][ T6320] [U] [ 130.699894][ T6320] [U] [ 130.701649][ T6320] [U] [ 130.703470][ T6320] [U] [ 130.704907][ T6320] [U] [ 130.706337][ T6320] [U] [ 130.707718][ T6320] [U] [ 130.709110][ T6320] [U] [ 130.710374][ T6320] [U] [ 130.711639][ T6320] [U] [ 130.717641][ T6319] [U] [ 130.767355][ T6322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'. [ 130.786075][ T5523] hid (null): invalid report_size -22536 [ 130.805450][ T5523] nintendo 0003:057E:2009.0005: invalid report_size -22536 [ 130.811704][ T5523] nintendo 0003:057E:2009.0005: item 0 4 1 7 parsing failed [ 130.815548][ T5523] nintendo 0003:057E:2009.0005: HID parse failed [ 130.823696][ T5523] nintendo 0003:057E:2009.0005: probe - fail = -22 [ 130.826993][ T5523] nintendo 0003:057E:2009.0005: probe with driver nintendo failed with error -22 [ 131.160489][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.239382][ T3727] usb 5-1: USB disconnect, device number 6 [ 131.361873][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 131.390280][ T58] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.400243][ T58] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 131.409849][ T58] usb 6-1: can't read configurations, error -71 [ 132.089717][ T3727] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.277245][ T3727] usb 5-1: Using ep0 maxpacket: 16 [ 132.281207][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 132.285899][ T3727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 132.296953][ T3727] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 132.310689][ T3727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.322277][ T3727] usb 5-1: config 0 descriptor?? [ 132.486894][ T6348] Bluetooth: MGMT ver 1.23 [ 132.684289][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 132.694784][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.706900][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.943502][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.960193][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.994197][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.010750][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.038598][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.053937][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.075611][ T3727] hid (null): bogus close delimiter [ 133.084452][ T3727] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 133.087849][ T3727] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 133.099673][ T3727] hid-generic 0003:0158:0100.0006: bogus close delimiter [ 133.102766][ T3727] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed [ 133.106850][ T3727] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 133.405255][ T3727] usb 5-1: USB disconnect, device number 7 [ 133.856031][ T6365] trusted_key: encrypted_key: insufficient parameters specified [ 133.994293][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'. [ 135.052219][ T6391] [U] [ 135.053769][ T6391] [U] [ 135.055215][ T6391] [U] [ 135.056385][ T6391] [U] [ 135.057550][ T6391] [U] [ 135.058759][ T6391] [U] [ 135.060011][ T6391] [U] [ 135.061311][ T6391] [U] [ 135.063259][ T6391] [U] [ 135.064554][ T6391] [U] [ 135.065809][ T6391] [U] [ 135.068761][ T6390] [U] [ 135.169037][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.313'. [ 135.226302][ T6395] overlayfs: workdir and upperdir must reside under the same mount [ 136.125420][ T6420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.318'. [ 136.373261][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.323'. [ 138.153356][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.195702][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 139.487301][ T6457] warning: `syz.2.338' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.886578][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 140.966388][ T6477] random: crng reseeded on system resumption [ 141.240980][ T6483] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.343'. [ 141.245364][ T6483] openvswitch: netlink: ct_state flags 00000300 unsupported [ 141.352653][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.344'. [ 141.356937][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.344'. [ 141.672115][ T6490] zonefs (nbd2) ERROR: Not a zoned block device [ 142.352177][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 146.499833][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 146.655738][ T6541] [U] [ 146.657148][ T6541] [U] [ 146.658421][ T6541] [U] [ 146.659632][ T6541] [U] [ 146.663004][ T6541] [U] [ 146.664343][ T6541] [U] [ 146.665609][ T6541] [U] [ 146.666854][ T6541] [U] [ 146.668504][ T6541] [U] [ 146.669844][ T6541] [U] [ 146.671114][ T6541] [U] [ 146.673812][ T6540] [U] [ 148.819941][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 149.615968][ T6594] [U] [ 149.617199][ T6594] [U] [ 149.618376][ T6594] [U] [ 149.619494][ T6594] [U] [ 149.628821][ T6594] [U] [ 149.630246][ T6594] [U] [ 149.631921][ T6594] [U] [ 149.633199][ T6594] [U] [ 149.645860][ T6594] [U] [ 149.655575][ T6594] [U] [ 149.656785][ T6594] [U] [ 149.694151][ T6592] [U] [ 150.992466][ T6622] [U] [ 150.993932][ T6622] [U] [ 150.995194][ T6622] [U] [ 150.996409][ T6622] [U] [ 150.997695][ T6622] [U] [ 150.998957][ T6622] [U] [ 151.000250][ T6622] [U] [ 151.001545][ T6622] [U] [ 151.010860][ T6622] [U] [ 151.013066][ T6622] [U] [ 151.014327][ T6622] [U] [ 151.018129][ T6621] [U] [ 151.460558][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 152.270943][ T6641] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 152.444404][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 152.474452][ T5356] Bluetooth: hci3: Malformed Event: 0x02 [ 152.806369][ T6640] pim6reg: entered allmulticast mode [ 153.737516][ T6659] netlink: 160 bytes leftover after parsing attributes in process `syz.0.395'. [ 154.665627][ T6670] [U] [ 154.666854][ T6670] [U] [ 154.668046][ T6670] [U] [ 154.669238][ T6670] [U] [ 154.671367][ T6670] [U] [ 154.672593][ T6670] [U] [ 154.673767][ T6670] [U] [ 154.674946][ T6670] [U] [ 154.676294][ T6670] [U] [ 154.677472][ T6670] [U] [ 154.678652][ T6670] [U] [ 154.686000][ T6669] [U] [ 155.327471][ T6683] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 155.331068][ T6683] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.404'. [ 156.722129][ T6697] [U] [ 156.723482][ T6697] [U] [ 156.724941][ T6697] [U] [ 156.726227][ T6697] [U] [ 156.727743][ T6697] [U] [ 156.728988][ T6697] [U] [ 156.730239][ T6697] [U] [ 156.731637][ T6697] [U] [ 156.734090][ T6697] [U] [ 156.735699][ T6697] [U] [ 156.737133][ T6697] [U] [ 156.741856][ T6696] [U] [ 157.019395][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'. [ 157.157706][ T6707] serio: Serial port pts0 [ 160.608329][ T6751] 9pnet: p9_errstr2errno: server reported unknown error [ 161.901790][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 162.254699][ T6785] 9pnet_fd: Insufficient options for proto=fd [ 162.341197][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 162.795015][ T6800] can0: slcan on ptm1. [ 162.963661][ T6799] can0 (unregistered): slcan off ptm1. [ 163.595032][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 163.695365][ T5356] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 163.700111][ T5356] Bluetooth: hci3: Injecting HCI hardware error event [ 163.719888][ T5365] Bluetooth: hci3: hardware error 0x00 [ 163.933381][ T6837] overlayfs: failed to resolve './file0': -2 [ 164.294453][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 165.434145][ T6867] Bluetooth: MGMT ver 1.23 [ 165.779747][ T1417] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 165.939675][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 165.939690][ T39] audit: type=1326 audit(1725952987.784:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.470" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x0 [ 165.972349][ T1417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.979833][ T5365] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 165.983106][ T1417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.987371][ T1417] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 166.002463][ T1417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.019052][ T1417] usb 7-1: config 0 descriptor?? [ 166.435492][ T6888] random: crng reseeded on system resumption [ 167.092158][ T1417] usbhid 7-1:0.0: can't add hid device: -71 [ 167.094988][ T1417] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 167.107676][ T1417] usb 7-1: USB disconnect, device number 6 [ 167.555000][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 167.637137][ T5523] libceph: connect (1)[c::]:6789 error -101 [ 167.640841][ T5523] libceph: mon0 (1)[c::]:6789 connect error [ 167.664667][ T6909] ceph: No mds server is up or the cluster is laggy [ 169.166384][ T6927] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 169.171800][ T6927] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 169.210957][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.483'. [ 171.025762][ T6971] cgroup: noprefix used incorrectly [ 171.685599][ T6979] capability: warning: `syz.0.502' uses deprecated v2 capabilities in a way that may be insecure [ 172.060824][ T6984] tmpfs: Bad value for 'mpol' [ 172.217982][ T39] audit: type=1326 audit(1725952994.064:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.0.502" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x0 [ 172.340262][ T6992] serio: Serial port pts0 [ 173.170931][ T6999] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 174.832073][ T7010] virtio-fs: tag <(null)> not found [ 174.899303][ T7010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 174.902705][ T7010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.912705][ T7010] vhci_hcd vhci_hcd.0: Device attached [ 175.134350][ T8] vhci_hcd: vhci_device speed not set [ 175.209819][ T8] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 175.373371][ T7011] vhci_hcd: connection reset by peer [ 175.379112][ T99] vhci_hcd: stop threads [ 175.382302][ T99] vhci_hcd: release socket [ 175.389652][ T99] vhci_hcd: disconnect device [ 175.594136][ T7015] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 175.596800][ T7015] ALSA: mixer_oss: invalid OSS volume 'Ô©6À~fõ`{îðÆÄÍXS¥Ô’j†ì?)]0žŽ¡\' [ 175.600420][ T7015] ALSA: mixer_oss: invalid OSS volume 'ô²]qMˆ¦3³TóÝ=Ðöæ\S‚¯1å2$Ž®*' [ 175.603847][ T7015] ALSA: mixer_oss: invalid OSS volume ' ;*†ç7£â„á³ ýµ”†cç+PÎ÷qg­°ùU' [ 175.607395][ T7015] ALSA: mixer_oss: invalid OSS volume 'øäh€žv9gO©‚=Ñ RpÑ€äH[ÃtÓ77˜' [ 175.763412][ T7023] tmpfs: Bad value for 'mpol' [ 175.910342][ T7028] ubi: mtd0 is already attached to ubi0 [ 176.348399][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 176.432187][ T7036] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 176.492189][ T39] audit: type=1326 audit(1725952998.334:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.0.518" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x0 [ 176.608758][ T7031] infiniband syz2: set active [ 176.619756][ T7031] infiniband syz2: added team_slave_1 [ 176.756129][ T7031] RDS/IB: syz2: added [ 176.778599][ T7031] smc: adding ib device syz2 with port count 1 [ 176.799923][ T7031] smc: ib device syz2 port 1 has pnetid [ 177.914491][ T7062] veth0_vlan: left promiscuous mode [ 178.251611][ T7068] can0: slcan on ptm0. [ 178.441012][ T7067] can0 (unregistered): slcan off ptm0. [ 179.040178][ T7090] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.147132][ T7090] kvm: pic: level sensitive irq not supported [ 179.150058][ T7090] kvm: pic: non byte read [ 179.179615][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.187047][ T7090] kvm: pic: level sensitive irq not supported [ 179.187656][ T7090] kvm: pic: non byte read [ 180.311433][ T8] vhci_hcd: vhci_device speed not set [ 180.512424][ T7125] netlink: 'syz.1.546': attribute type 15 has an invalid length. [ 181.911716][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 183.142971][ T7169] tmpfs: Unknown parameter '/' [ 183.726956][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 183.742088][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 183.837658][ T7192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.573'. [ 183.849507][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 183.859737][ T7192] netlink: 31 bytes leftover after parsing attributes in process `syz.3.573'. [ 183.879696][ T7192] netlink: 'syz.3.573': attribute type 3 has an invalid length. [ 183.883399][ T7192] netlink: 'syz.3.573': attribute type 2 has an invalid length. [ 183.886530][ T7192] netlink: 31 bytes leftover after parsing attributes in process `syz.3.573'. [ 185.450749][ T7225] netlink: 'syz.3.583': attribute type 11 has an invalid length. [ 185.807202][ T7234] AppArmor: change_hat: Invalid input '0ÿ' [ 186.343730][ T7247] 9pnet_fd: Insufficient options for proto=fd [ 187.070368][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 187.092820][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 187.783327][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 188.775381][ T7325] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 188.777968][ T7325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.784762][ T7325] vhci_hcd vhci_hcd.0: Device attached [ 188.904950][ T7331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 188.986828][ T5451] vhci_hcd: vhci_device speed not set [ 189.059675][ T5451] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 189.104611][ T1187] Bluetooth: hci4: Frame reassembly failed (-84) [ 189.111950][ T7339] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 189.189925][ T7326] vhci_hcd: connection reset by peer [ 189.201962][ T82] vhci_hcd: stop threads [ 189.203981][ T82] vhci_hcd: release socket [ 189.206103][ T82] vhci_hcd: disconnect device [ 190.480778][ T7356] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 191.030642][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 191.179724][ T5356] Bluetooth: hci4: command 0x1003 tx timeout [ 191.179770][ T5365] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 192.727740][ T7382] syz.3.640 (7382) used greatest stack depth: 20784 bytes left [ 192.855837][ T7406] ubi: mtd0 is already attached to ubi0 [ 193.999103][ T7431] tmpfs: Bad value for 'mpol' [ 194.139933][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.220034][ T5451] vhci_hcd: vhci_device speed not set [ 194.342282][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.347714][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 194.356013][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 194.378033][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.386057][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.390373][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.410692][ T8] usb 5-1: config 0 descriptor?? [ 194.419940][ T7428] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.892186][ T8] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 194.896863][ T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 194.918793][ T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 195.213605][ T57] usb 5-1: USB disconnect, device number 8 [ 196.035011][ T7453] can0: slcan on ptm0. [ 196.193957][ T7452] can0 (unregistered): slcan off ptm0. [ 196.647585][ T7476] netlink: 72 bytes leftover after parsing attributes in process `syz.2.667'. [ 197.028490][ T7489] netlink: 52 bytes leftover after parsing attributes in process `syz.2.671'. [ 197.541332][ T7498] serio: Serial port pts0 [ 197.544047][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 198.768381][ T6127] IPVS: starting estimator thread 0... [ 198.906845][ T7520] IPVS: using max 21 ests per chain, 50400 per kthread [ 199.588705][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.174135][ T5451] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 202.366054][ T5451] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.371085][ T5451] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.375381][ T5451] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 202.379340][ T5451] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.385393][ T5451] usb 8-1: config 0 descriptor?? [ 202.656487][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 202.833404][ T5451] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 202.839768][ T5451] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 202.848027][ T5451] arvo 0003:1E7D:30D4.0008: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 203.034288][ T5451] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device [ 203.037281][ T5451] arvo 0003:1E7D:30D4.0008: couldn't install keyboard [ 203.050805][ T5451] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -5 [ 203.244897][ T6127] usb 8-1: USB disconnect, device number 3 [ 203.359759][ T7570] serio: Serial port pts0 [ 204.663550][ T7591] dvmrp0: entered allmulticast mode [ 204.708602][ T7591] input: syz1 as /devices/virtual/input/input8 [ 205.926059][ T7612] netlink: 'syz.0.711': attribute type 27 has an invalid length. [ 206.321211][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.326485][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.601766][ T7623] tmpfs: Bad value for 'mpol' [ 206.796406][ T7612] infiniband syz2: set down [ 206.818694][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.846615][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.065473][ T7612] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.069347][ T7612] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.073356][ T7612] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.077092][ T7612] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.313231][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 207.719244][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.724527][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.728270][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.733392][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.737288][ T5356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.741243][ T5356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.911820][ T7641] serio: Serial port pts0 [ 208.226928][ T5365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.232740][ T5365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.237633][ T5365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.242083][ T5365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.245896][ T5365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.250571][ T5365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.432089][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 208.889284][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.895537][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.898682][ T7634] bridge_slave_0: entered allmulticast mode [ 208.907693][ T7634] bridge_slave_0: entered promiscuous mode [ 209.009325][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.015431][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.018320][ T7634] bridge_slave_1: entered allmulticast mode [ 209.034330][ T7634] bridge_slave_1: entered promiscuous mode [ 209.103053][ T1100] bridge_slave_1: left allmulticast mode [ 209.108735][ T1100] bridge_slave_1: left promiscuous mode [ 209.116204][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.136334][ T1100] bridge_slave_0: left allmulticast mode [ 209.148631][ T1100] bridge_slave_0: left promiscuous mode [ 209.153192][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.746549][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.756114][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.767684][ T1100] bond0 (unregistering): Released all slaves [ 209.819538][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.822531][ T5356] Bluetooth: hci0: command tx timeout [ 209.888695][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.065925][ T7634] team0: Port device team_slave_0 added [ 210.078941][ T7634] team0: Port device team_slave_1 added [ 210.150041][ T7646] chnl_net:caif_netlink_parms(): no params data found [ 210.262904][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.266257][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.280714][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.289005][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.292491][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.300034][ T5356] Bluetooth: hci2: command tx timeout [ 210.304369][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.796176][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.801247][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.804800][ T7646] bridge_slave_0: entered allmulticast mode [ 210.809466][ T7646] bridge_slave_0: entered promiscuous mode [ 210.837333][ T7634] hsr_slave_0: entered promiscuous mode [ 210.869808][ T7634] hsr_slave_1: entered promiscuous mode [ 210.887654][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.899651][ T7634] Cannot create hsr debugfs directory [ 210.964237][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.971038][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.914763][ T5356] Bluetooth: hci0: command tx timeout [ 212.380221][ T5356] Bluetooth: hci2: command tx timeout [ 212.471902][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 212.483082][ T99] smc: removing ib device syz2 [ 212.818727][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 213.981799][ T5356] Bluetooth: hci0: command tx timeout [ 214.167321][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.171967][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.175344][ T7646] bridge_slave_1: entered allmulticast mode [ 214.185221][ T7646] bridge_slave_1: entered promiscuous mode [ 214.362051][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.411229][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.472262][ T5356] Bluetooth: hci2: command tx timeout [ 214.569034][ T7646] team0: Port device team_slave_0 added [ 214.590766][ T7646] team0: Port device team_slave_1 added [ 214.702361][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.705204][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.716045][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.723313][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.727983][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.744834][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.879806][ T7646] hsr_slave_0: entered promiscuous mode [ 214.883395][ T7646] hsr_slave_1: entered promiscuous mode [ 214.887026][ T7646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.891643][ T7646] Cannot create hsr debugfs directory [ 215.781861][ T7646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.799349][ T7634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.830462][ T7634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.847944][ T7634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.858817][ T7634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.898010][ T7646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.955492][ T7717] process 'syz.1.737' launched '/dev/fd/6' with NULL argv: empty string added [ 216.021918][ T7646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.079689][ T5356] Bluetooth: hci0: command tx timeout [ 216.141337][ T7646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.244049][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.263867][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.278649][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.282331][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.294557][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.297854][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.405957][ T7646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.423504][ T7646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.436147][ T7646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.447344][ T7646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.539761][ T5356] Bluetooth: hci2: command tx timeout [ 216.592738][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.636600][ T7646] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.652467][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.655732][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.679051][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.682280][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.741224][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.840958][ T7634] veth0_vlan: entered promiscuous mode [ 216.862169][ T7634] veth1_vlan: entered promiscuous mode [ 216.895394][ T7634] veth0_macvtap: entered promiscuous mode [ 216.905215][ T7634] veth1_macvtap: entered promiscuous mode [ 216.913020][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 216.921952][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.927637][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.937320][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.943143][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.948851][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.953870][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.964578][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.992042][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.997059][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.003125][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.008475][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.014551][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.019034][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.030948][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.063259][ T7634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.067089][ T7634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.074555][ T7634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.079551][ T7634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.087697][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.202972][ T7646] veth0_vlan: entered promiscuous mode [ 217.243089][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.246435][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.252382][ T7646] veth1_vlan: entered promiscuous mode [ 217.327809][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.332609][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.367976][ T7646] veth0_macvtap: entered promiscuous mode [ 217.384705][ T7646] veth1_macvtap: entered promiscuous mode [ 217.403053][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.407778][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.416733][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.423637][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.427933][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.443882][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.448186][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.456034][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.462431][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.478764][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.488358][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.492952][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.497725][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.506248][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.510312][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.513955][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.518408][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.526234][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.536304][ T7646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.541352][ T7646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.545570][ T7646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.549454][ T7646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.694667][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.707666][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.717044][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.721253][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.873863][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.724'. [ 218.261311][ T7759] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 218.270767][ T7759] netlink: 512 bytes leftover after parsing attributes in process `syz.3.746'. [ 219.181402][ T5356] Bluetooth: Unexpected continuation frame (len 24) [ 220.194810][ T39] audit: type=1326 audit(1725953043.037:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.2.750" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66579 code=0x0 [ 221.451882][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 225.497757][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.771'. [ 226.639307][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 226.674263][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 228.855021][ T7908] kAFS: unable to lookup cell '' [ 229.866856][ T7926] tmpfs: Bad value for 'mpol' [ 229.944660][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 229.948549][ T7931] netlink: 'syz.2.793': attribute type 15 has an invalid length. [ 230.302345][ T5356] Bluetooth: Unexpected continuation frame (len 24) [ 230.464459][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 230.473151][ T7941] netlink: 104 bytes leftover after parsing attributes in process `syz.1.796'. [ 230.477100][ T7941] netlink: 104 bytes leftover after parsing attributes in process `syz.1.796'. [ 230.538210][ T7941] netlink: 'syz.1.796': attribute type 21 has an invalid length. [ 230.542227][ T7941] netlink: 156 bytes leftover after parsing attributes in process `syz.1.796'. [ 230.546372][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 230.842982][ T7950] netlink: 64 bytes leftover after parsing attributes in process `syz.3.798'. [ 234.265125][ T7998] nbd: device at index 2 is going down [ 237.200445][ T8058] [U] [ 237.201641][ T8058] [U] [ 237.203004][ T8058] [U] [ 237.204295][ T8058] [U] [ 237.209996][ T8058] [U] [ 237.211347][ T8058] [U] [ 237.212461][ T8058] [U] [ 237.213749][ T8058] [U] [ 237.216163][ T8058] [U] [ 237.217727][ T8058] [U] [ 237.219070][ T8058] [U] [ 237.533242][ T6138] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 237.734584][ T6138] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.739008][ T6138] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.750050][ T6138] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.753836][ T6138] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.765815][ T6138] usb 8-1: config 0 descriptor?? [ 237.960635][ T8054] [U] [ 238.192662][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.208919][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.215716][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.219219][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.225854][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.229154][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.239424][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.243774][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.252001][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.255667][ T6138] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 238.260439][ T6138] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 238.277241][ T6138] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 242.008163][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 243.893412][ T8150] tmpfs: Bad value for 'mpol' [ 243.959220][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 243.983578][ T8151] netlink: 'syz.1.867': attribute type 15 has an invalid length. [ 245.498732][ T8166] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 245.502537][ T8166] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 245.510407][ T8166] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 245.514784][ T8166] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 246.536669][ T8182] serio: Serial port pts1 [ 246.994547][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 247.751583][ T5365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.758343][ T5365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.763905][ T5365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.769556][ T5365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.772822][ T5365] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.776356][ T5365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.533687][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 248.743906][ T8222] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 248.769720][ T8222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.889'. [ 248.775002][ T8222] bridge0: port 3(dummy0) entered blocking state [ 248.778222][ T8222] bridge0: port 3(dummy0) entered disabled state [ 248.787132][ T8222] dummy0: entered allmulticast mode [ 248.791252][ T8222] dummy0: entered promiscuous mode [ 248.794089][ T8222] bridge0: port 3(dummy0) entered blocking state [ 248.796877][ T8222] bridge0: port 3(dummy0) entered forwarding state [ 248.863149][ T8057] plantronics 0003:047F:FFFF.0009: timeout initializing reports [ 248.957521][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.969925][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.973040][ T8204] bridge_slave_0: entered allmulticast mode [ 248.992812][ T8204] bridge_slave_0: entered promiscuous mode [ 249.001632][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.005361][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.011386][ T8204] bridge_slave_1: entered allmulticast mode [ 249.017197][ T8204] bridge_slave_1: entered promiscuous mode [ 249.231916][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.358326][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.451177][ T8204] team0: Port device team_slave_0 added [ 249.457472][ T8204] team0: Port device team_slave_1 added [ 249.523513][ T59] usb 8-1: USB disconnect, device number 4 [ 249.647024][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.655535][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.668334][ T8204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.742353][ T1200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.758074][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.767099][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.778914][ T8204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.789398][ T8230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.892'. [ 249.819730][ T5356] Bluetooth: hci4: command tx timeout [ 249.933681][ T1200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.954546][ T8204] hsr_slave_0: entered promiscuous mode [ 249.958183][ T8204] hsr_slave_1: entered promiscuous mode [ 249.970615][ T8204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.973640][ T8204] Cannot create hsr debugfs directory [ 250.054739][ T8240] kAFS: unable to lookup cell '' [ 250.066017][ T1200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.163011][ T1200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.338813][ T1200] bridge_slave_1: left allmulticast mode [ 250.342107][ T1200] bridge_slave_1: left promiscuous mode [ 250.346396][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.368600][ T1200] bridge_slave_0: left allmulticast mode [ 250.376607][ T1200] bridge_slave_0: left promiscuous mode [ 250.387960][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.441282][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 251.072053][ T1200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.079220][ T1200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.086304][ T1200] bond0 (unregistering): Released all slaves [ 251.364613][ T8270] kAFS: unable to lookup cell '' [ 251.638193][ T1200] hsr_slave_0: left promiscuous mode [ 251.664862][ T1200] hsr_slave_1: left promiscuous mode [ 251.668485][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.679733][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.702787][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.705796][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.784078][ T1200] veth1_macvtap: left promiscuous mode [ 251.787111][ T1200] veth0_macvtap: left promiscuous mode [ 251.789922][ T1200] veth1_vlan: left promiscuous mode [ 251.792507][ T1200] veth0_vlan: left promiscuous mode [ 251.899807][ T5356] Bluetooth: hci4: command tx timeout [ 252.961908][ C2] hpet: Lost 1 RTC interrupts [ 253.079451][ T1200] team0 (unregistering): Port device team_slave_1 removed [ 253.199496][ T1200] team0 (unregistering): Port device team_slave_0 removed [ 253.498298][ C3] vkms_vblank_simulate: vblank timer overrun [ 253.989764][ T5356] Bluetooth: hci4: command tx timeout [ 254.342916][ T8204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.387755][ T8204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.404623][ T8204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.432719][ T8204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.441457][ T8301] kAFS: unable to lookup cell '' [ 254.490160][ T6128] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 254.559289][ T8204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.578386][ T8204] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.593354][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.596537][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.609432][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.612138][ T8304] trusted_key: syz.1.913 sent an empty control message without MSG_MORE. [ 254.612628][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.669978][ T6128] usb 7-1: Using ep0 maxpacket: 8 [ 254.675691][ T6128] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 254.685544][ T6128] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 254.689107][ T6128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 254.693485][ T6128] usb 7-1: SerialNumber: syz [ 254.697311][ T6128] usb 7-1: config 0 descriptor?? [ 254.757879][ T8309] tmpfs: Bad value for 'mpol' [ 254.803147][ T8204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.818004][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 254.824674][ T8311] netlink: 'syz.1.914': attribute type 15 has an invalid length. [ 254.864105][ T8204] veth0_vlan: entered promiscuous mode [ 254.874235][ T8204] veth1_vlan: entered promiscuous mode [ 254.923417][ T8204] veth0_macvtap: entered promiscuous mode [ 254.933000][ T6128] usb 7-1: USB disconnect, device number 7 [ 254.935111][ T8204] veth1_macvtap: entered promiscuous mode [ 254.952736][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.957227][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.962903][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.968817][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.973608][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.980281][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.986888][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.995119][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.002315][ T8204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.012583][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.018044][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.023803][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.029252][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.034841][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.042182][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.048158][ T8204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.054743][ T8204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.062685][ T8204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.079960][ T8204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.084005][ T8204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.088385][ T8204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.092583][ T8204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.173726][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.177081][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.212399][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.215873][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.325868][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 255.339226][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 255.342892][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 255.368727][ T8314] netlink: 'syz.3.883': attribute type 41 has an invalid length. [ 256.069841][ T5356] Bluetooth: hci4: command tx timeout [ 256.070208][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.164790][ T8332] IPv6: Can't replace route, no match found [ 256.288841][ T8332] netem: incorrect gi model size [ 256.293242][ T25] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 256.297604][ T8332] netem: change failed [ 256.302948][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.322490][ T25] usb 6-1: config 0 descriptor?? [ 256.876742][ T8347] kAFS: unable to lookup cell '' [ 257.366721][ T8354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.930'. [ 257.402408][ T25] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 257.416932][ T25] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 257.427221][ T25] asix 6-1:0.0: probe with driver asix failed with error -71 [ 257.477723][ T25] usb 6-1: USB disconnect, device number 5 [ 257.575416][ T5356] Bluetooth: Unexpected continuation frame (len 24) [ 258.229995][ T8368] nlmon0: Master is either lo or non-ether device [ 258.634573][ T8374] kAFS: unable to lookup cell '' [ 261.033012][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.283506][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.449968][ T8401] kAFS: unable to lookup cell '' [ 265.237977][ T8435] kAFS: unable to lookup cell '' [ 266.701558][ T8446] nbd: device at index 3 is going down [ 266.880518][ T8450] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 267.748031][ T5365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.757530][ T5365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.763916][ T5365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.769873][ T5365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.776829][ T5365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.780039][ T5365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.905563][ T8463] kAFS: unable to lookup cell '' [ 268.123022][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 268.427943][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.431883][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.435369][ T8459] bridge_slave_0: entered allmulticast mode [ 268.439160][ T8459] bridge_slave_0: entered promiscuous mode [ 268.447243][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.450704][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.454022][ T8459] bridge_slave_1: entered allmulticast mode [ 268.457855][ T8459] bridge_slave_1: entered promiscuous mode [ 268.556129][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.564128][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.691952][ T8459] team0: Port device team_slave_0 added [ 268.708685][ T8459] team0: Port device team_slave_1 added [ 268.835291][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.839791][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.851133][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.857890][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.862471][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.877170][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.986538][ T8459] hsr_slave_0: entered promiscuous mode [ 268.995144][ T8459] hsr_slave_1: entered promiscuous mode [ 269.005279][ T8459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.009239][ T8459] Cannot create hsr debugfs directory [ 269.054046][ T8482] sd 0:0:0:0: PR command failed: 1026 [ 269.069743][ T8482] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 269.083020][ T8482] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 269.678150][ T8459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.801506][ T8459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.820082][ T5356] Bluetooth: hci2: command tx timeout [ 269.892623][ T8459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.042689][ T8459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.257512][ T8459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.267052][ T8459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.273737][ T8459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.283698][ T8459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.434625][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.475859][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.489236][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.492174][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.520130][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.522987][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.917433][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.132886][ T8459] veth0_vlan: entered promiscuous mode [ 271.163866][ T8459] veth1_vlan: entered promiscuous mode [ 271.221979][ T8459] veth0_macvtap: entered promiscuous mode [ 271.234680][ T8459] veth1_macvtap: entered promiscuous mode [ 271.265343][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.273746][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.277845][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.283330][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.288487][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.293398][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.296971][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.302458][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.306871][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.311823][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.320578][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.326650][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.333560][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.337999][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.349792][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.354265][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.358870][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.364075][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.369539][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.374462][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.379186][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.395817][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.409196][ T8459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.419010][ T8459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.425697][ T8459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.437648][ T8459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.621116][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.624703][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.651563][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.670128][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.900389][ T5356] Bluetooth: hci2: command tx timeout [ 272.389990][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 272.965383][ T8523] fuse: Unknown parameter '0x0000000000000005' [ 273.269654][ T8536] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 273.366090][ T8541] Illegal XDP return value 1610940416 on prog (id 493) dev N/A, expect packet loss! [ 273.979894][ T5356] Bluetooth: hci2: command tx timeout [ 275.655527][ T8558] serio: Serial port pts0 [ 276.060499][ T5356] Bluetooth: hci2: command tx timeout [ 276.280743][ T8564] tipc: Started in network mode [ 276.283165][ T8564] tipc: Node identity 2007ff, cluster identity 4711 [ 276.286756][ T8564] tipc: Node number set to 2099199 [ 276.392412][ T1200] tipc: Subscription rejected, illegal request [ 279.770866][ T5356] Bluetooth: Unexpected continuation frame (len 24) [ 279.968738][ T8636] input: syz0 as /devices/virtual/input/input10 [ 280.884178][ T8650] binder: 8648:8650 ioctl 4018620d 0 returned -22 [ 281.210297][ T8652] bond0: entered promiscuous mode [ 281.213317][ T8652] bond_slave_0: entered promiscuous mode [ 281.215922][ T8652] bond_slave_1: entered promiscuous mode [ 281.329020][ T8655] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 281.356731][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.361328][ T8655] team0: entered promiscuous mode [ 281.363369][ T8655] team_slave_0: entered promiscuous mode [ 281.366058][ T8655] team_slave_1: entered promiscuous mode [ 281.369522][ T8655] bond0: (slave team0): Enslaving as an active interface with an up link [ 281.380305][ T8652] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 281.385313][ T8652] bond0: (slave team0): Releasing backup interface [ 281.389091][ T8652] team0: left promiscuous mode [ 281.392496][ T8652] team_slave_0: left promiscuous mode [ 281.394967][ T8652] team_slave_1: left promiscuous mode [ 281.404787][ T8652] bridge0: port 3(team0) entered blocking state [ 281.407376][ T8652] bridge0: port 3(team0) entered disabled state [ 281.410381][ T8652] team0: entered allmulticast mode [ 281.412823][ T8652] team_slave_0: entered allmulticast mode [ 281.415365][ T8652] team_slave_1: entered allmulticast mode [ 281.420652][ T8652] team0: entered promiscuous mode [ 281.422685][ T8652] team_slave_0: entered promiscuous mode [ 281.426379][ T8652] team_slave_1: entered promiscuous mode [ 281.567658][ T8658] netlink: 'syz.1.1023': attribute type 15 has an invalid length. [ 283.418709][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1029'. [ 284.594588][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1035'. [ 288.736413][ T8744] : renamed from bond_slave_0 (while UP) [ 288.754576][ T8750] bridge0: entered promiscuous mode [ 288.756862][ T8750] bridge0: entered allmulticast mode [ 288.901923][ T39] audit: type=1326 audit(1725953111.747:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 288.921823][ T39] audit: type=1326 audit(1725953111.747:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 288.939065][ T39] audit: type=1326 audit(1725953111.767:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=49 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 288.944426][ T5365] Bluetooth: Unexpected continuation frame (len 24) [ 288.957173][ T39] audit: type=1326 audit(1725953111.767:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 288.970689][ T8758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'. [ 288.980552][ T39] audit: type=1326 audit(1725953111.767:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 289.006237][ T39] audit: type=1326 audit(1725953111.767:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 289.031770][ T39] audit: type=1326 audit(1725953111.767:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 289.042704][ T5357] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 289.052554][ T39] audit: type=1326 audit(1725953111.787:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 289.063169][ T39] audit: type=1326 audit(1725953111.787:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 289.073727][ T39] audit: type=1326 audit(1725953111.787:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8757 comm="syz.3.1059" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 289.093842][ T8758] Bluetooth: MGMT ver 1.23 [ 289.162633][ T8764] 9pnet_fd: Insufficient options for proto=fd [ 289.232745][ T5357] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.238859][ T5357] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.252901][ T5357] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 289.257600][ T5357] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 289.263191][ T5357] usb 7-1: Manufacturer: syz [ 289.276364][ T5357] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 289.569677][ T6138] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 289.751649][ T6138] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 289.756373][ T6138] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.769634][ T6138] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 289.790442][ T6138] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 289.812532][ T6138] usb 8-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 289.816917][ T6138] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.821114][ T6138] usb 8-1: Product: syz [ 289.823915][ T6138] usb 8-1: Manufacturer: syz [ 289.826258][ T6138] usb 8-1: SerialNumber: syz [ 289.840955][ T6138] usb 8-1: config 0 descriptor?? [ 289.852886][ T6138] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 289.870484][ T6138] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 290.030202][ T6138] usb 7-1: USB disconnect, device number 8 [ 290.052250][ T5357] usb 8-1: USB disconnect, device number 5 [ 290.061132][ T5357] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 290.789663][ T5365] Bluetooth: hci2: command 0x0405 tx timeout [ 292.830552][ T8833] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1082'. [ 293.840972][ T6127] libceph: connect (1)[c::]:6789 error -101 [ 293.843901][ T6127] libceph: mon0 (1)[c::]:6789 connect error [ 293.849218][ T6127] libceph: connect (1)[c::]:6789 error -101 [ 293.853359][ T6127] libceph: mon0 (1)[c::]:6789 connect error [ 293.856147][ T8873] ceph: No mds server is up or the cluster is laggy [ 294.826904][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 294.847660][ T8887] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.852617][ T8887] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.856893][ T8887] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.860999][ T8887] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.872132][ T8887] vxlan0: entered promiscuous mode [ 294.940252][ T39] kauditd_printk_skb: 84 callbacks suppressed [ 294.940267][ T39] audit: type=1326 audit(1725953117.787:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.3.1102" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x0 [ 297.159445][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1109'. [ 297.963140][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 298.089405][ T8929] ------------[ cut here ]------------ [ 298.093020][ T8929] name '22479' [ 298.109766][ T8929] WARNING: CPU: 3 PID: 8929 at fs/proc/generic.c:711 remove_proc_entry+0x268/0x470 [ 298.113447][ T8929] Modules linked in: [ 298.115091][ T8929] CPU: 3 UID: 0 PID: 8929 Comm: syz.0.1115 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 298.122289][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.126804][ T8929] RIP: 0010:remove_proc_entry+0x268/0x470 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.129327][ T8929] Code: 08 eb a2 e8 1a dc 67 ff 48 c7 c7 00 cf ff 8d e8 ee aa e7 08 e8 09 dc 67 ff 90 48 c7 c7 80 e1 60 8b 4c 89 e6 e8 79 94 2a ff 90 <0f> 0b 90 90 e9 72 ff ff ff e8 ea db 67 ff 49 8d be 98 00 00 00 48 [ 298.137916][ T8929] RSP: 0018:ffffc9002c9ffc88 EFLAGS: 00010286 [ 298.141890][ T8929] RAX: 0000000000000000 RBX: 1ffff9200593ff93 RCX: ffffffff814dd439 [ 298.145284][ T8929] RDX: ffff8880296e4880 RSI: ffffffff814dd446 RDI: 0000000000000001 [ 298.149245][ T8929] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 298.153776][ T8929] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880576b7548 [ 298.157608][ T8929] R13: dffffc0000000000 R14: ffff88805ea2b680 R15: ffff888049ad42c0 [ 298.161291][ T8929] FS: 0000000000000000(0000) GS:ffff88802b900000(0063) knlGS:0000000056729440 [ 298.165379][ T8929] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 298.168620][ T8929] CR2: 0000000000000000 CR3: 000000006b4b8000 CR4: 0000000000350ef0 [ 298.172367][ T8929] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.175722][ T8929] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 298.178997][ T8929] Call Trace: [ 298.180644][ T8929] [ 298.182048][ T8929] ? show_regs+0x8c/0xa0 [ 298.184134][ T8929] ? __warn+0xe5/0x3c0 [ 298.185896][ T8929] ? preempt_schedule_notrace+0x62/0xe0 [ 298.188120][ T8929] ? remove_proc_entry+0x268/0x470 [ 298.190375][ T8929] ? report_bug+0x3c0/0x580 [ 298.192592][ T8929] ? handle_bug+0x3d/0x70 [ 298.195021][ T8929] ? exc_invalid_op+0x17/0x50 [ 298.197731][ T8929] ? asm_exc_invalid_op+0x1a/0x20 [ 298.200557][ T8929] ? __warn_printk+0x199/0x350 [ 298.202626][ T8929] ? __warn_printk+0x1a6/0x350 [ 298.205044][ T8929] ? remove_proc_entry+0x268/0x470 [ 298.210070][ T8929] ? remove_proc_entry+0x267/0x470 [ 298.213452][ T8929] ? __pfx_lock_release+0x10/0x10 [ 298.215935][ T8929] ? __pfx_remove_proc_entry+0x10/0x10 [ 298.218519][ T8929] ? mark_held_locks+0x9f/0xe0 [ 298.221444][ T8929] ? __local_bh_enable_ip+0xa4/0x120 [ 298.224048][ T8929] bcm_release+0x27b/0x8d0 [ 298.227110][ T8929] __sock_release+0xb0/0x270 [ 298.229848][ T8929] ? __pfx_sock_close+0x10/0x10 [ 298.232022][ T8929] sock_close+0x1c/0x30 [ 298.233882][ T8929] __fput+0x408/0xbb0 [ 298.235798][ T8929] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.237960][ T8929] task_work_run+0x14e/0x250 [ 298.240012][ T8929] ? __pfx_task_work_run+0x10/0x10 [ 298.242470][ T8929] ? __pfx___close_range+0x10/0x10 [ 298.244904][ T8929] syscall_exit_to_user_mode+0x27b/0x2a0 [ 298.247446][ T8929] __do_fast_syscall_32+0x80/0x120 [ 298.249922][ T8929] do_fast_syscall_32+0x32/0x80 [ 298.252189][ T8929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.254986][ T8929] RIP: 0023:0xf743e579 [ 298.256859][ T8929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.264403][ T8929] RSP: 002b:00000000ffb6345c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 298.276870][ T8929] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 298.281166][ T8929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.285556][ T8929] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 298.289980][ T8929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.293696][ T8929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.297765][ T8929] [ 298.299078][ T8929] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.301559][ T8929] CPU: 3 UID: 0 PID: 8929 Comm: syz.0.1115 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 298.306145][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.311957][ T8929] Call Trace: [ 298.313773][ T8929] [ 298.315136][ T8929] dump_stack_lvl+0x3d/0x1f0 [ 298.317356][ T8929] panic+0x6dc/0x7c0 [ 298.319240][ T8929] ? __pfx_panic+0x10/0x10 [ 298.321381][ T8929] ? show_trace_log_lvl+0x363/0x500 [ 298.323999][ T8929] ? check_panic_on_warn+0x1f/0xb0 [ 298.326145][ T8929] ? remove_proc_entry+0x268/0x470 [ 298.327997][ T8929] check_panic_on_warn+0xab/0xb0 [ 298.329929][ T8929] __warn+0xf1/0x3c0 [ 298.331574][ T8929] ? preempt_schedule_notrace+0x62/0xe0 [ 298.334261][ T8929] ? remove_proc_entry+0x268/0x470 [ 298.336640][ T8929] report_bug+0x3c0/0x580 [ 298.338515][ T8929] handle_bug+0x3d/0x70 [ 298.340231][ T8929] exc_invalid_op+0x17/0x50 [ 298.342372][ T8929] asm_exc_invalid_op+0x1a/0x20 [ 298.345716][ T8929] RIP: 0010:remove_proc_entry+0x268/0x470 [ 298.348134][ T8929] Code: 08 eb a2 e8 1a dc 67 ff 48 c7 c7 00 cf ff 8d e8 ee aa e7 08 e8 09 dc 67 ff 90 48 c7 c7 80 e1 60 8b 4c 89 e6 e8 79 94 2a ff 90 <0f> 0b 90 90 e9 72 ff ff ff e8 ea db 67 ff 49 8d be 98 00 00 00 48 [ 298.355353][ T8929] RSP: 0018:ffffc9002c9ffc88 EFLAGS: 00010286 [ 298.357857][ T8929] RAX: 0000000000000000 RBX: 1ffff9200593ff93 RCX: ffffffff814dd439 [ 298.360587][ T8929] RDX: ffff8880296e4880 RSI: ffffffff814dd446 RDI: 0000000000000001 [ 298.363583][ T8929] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 298.367379][ T8929] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880576b7548 [ 298.370912][ T8929] R13: dffffc0000000000 R14: ffff88805ea2b680 R15: ffff888049ad42c0 [ 298.374372][ T8929] ? __warn_printk+0x199/0x350 [ 298.376432][ T8929] ? __warn_printk+0x1a6/0x350 [ 298.378583][ T8929] ? remove_proc_entry+0x267/0x470 [ 298.380891][ T8929] ? __pfx_lock_release+0x10/0x10 [ 298.382954][ T8929] ? __pfx_remove_proc_entry+0x10/0x10 [ 298.385294][ T8929] ? mark_held_locks+0x9f/0xe0 [ 298.387089][ T8929] ? __local_bh_enable_ip+0xa4/0x120 [ 298.389013][ T8929] bcm_release+0x27b/0x8d0 [ 298.390680][ T8929] __sock_release+0xb0/0x270 [ 298.392395][ T8929] ? __pfx_sock_close+0x10/0x10 [ 298.394189][ T8929] sock_close+0x1c/0x30 [ 298.395799][ T8929] __fput+0x408/0xbb0 [ 298.397533][ T8929] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.399799][ T8929] task_work_run+0x14e/0x250 [ 298.401734][ T8929] ? __pfx_task_work_run+0x10/0x10 [ 298.403875][ T8929] ? __pfx___close_range+0x10/0x10 [ 298.406005][ T8929] syscall_exit_to_user_mode+0x27b/0x2a0 [ 298.408329][ T8929] __do_fast_syscall_32+0x80/0x120 [ 298.410502][ T8929] do_fast_syscall_32+0x32/0x80 [ 298.412457][ T8929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.415165][ T8929] RIP: 0023:0xf743e579 [ 298.416975][ T8929] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.425595][ T8929] RSP: 002b:00000000ffb6345c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 298.429026][ T8929] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 298.432451][ T8929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.435874][ T8929] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 298.439560][ T8929] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.442668][ T8929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.445987][ T8929] [ 298.447895][ T8929] Kernel Offset: disabled [ 298.449860][ T8929] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:25:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9002cf4fb60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b23724 RDI=ffffc9002cf4fb60 RBP=ffffc9002cf4fb20 RSP=ffffc9002cf4fa80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc9002cf4fb60 R14=ffffc9002cf4fb28 R15=0000000000000000 RIP=ffffffff84b2374d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001a000 CR3=00000000696c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000004fde0b RBX=0000000000000001 RCX=ffffffff8b083089 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb08060 RBP=ffffed10036fd910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056e6fd9 R10=ffff88802b737ecb R11=0000000000000000 R12=0000000000000001 R13=ffff88801b7ec880 R14=ffffffff9011e758 R15=0000000000000000 RIP=ffffffff8b08447f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000201fc018 CR3=00000000696c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff96896550 RBX=ffff888022872f70 RCX=1ffffffff2d12cb6 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff968965b0 RBP=ffffc9000396fa78 RSP=ffffc9000396f940 R8 =0000000000000000 R9 =fffffbfff2d126e0 R10=ffffffff96893707 R11=0000000000000000 R12=ffff888022872440 R13=0000000000000040 R14=0000000000000006 R15=1ffff9200072df2e RIP=ffffffff8168f08a RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fecf31d1d00 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005603d876b000 CR3=0000000046f6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=122cd5e4122cd5e4 122cd5e4122cd5e4 122cd5e4122cd5e4 122cd5e4122cd5e4 122cd5e4122cd5e4 122cd5e4122cd5e4 122cd5e4122cd5e4 122cd5e4122cd5e4 ZMM22=ecc7a570ecc7a570 ecc7a570ecc7a570 ecc7a570ecc7a570 ecc7a570ecc7a570 ecc7a570ecc7a570 ecc7a570ecc7a570 ecc7a570ecc7a570 ecc7a570ecc7a570 ZMM23=f696a463f696a463 f696a463f696a463 f696a463f696a463 f696a463f696a463 f696a463f696a463 f696a463f696a463 f696a463f696a463 f696a463f696a463 ZMM24=bdf4c959bdf4c959 bdf4c959bdf4c959 bdf4c959bdf4c959 bdf4c959bdf4c959 bdf4c959bdf4c959 bdf4c959bdf4c959 bdf4c959bdf4c959 bdf4c959bdf4c959 ZMM25=d693e4cdd693e4cd d693e4cdd693e4cd d693e4cdd693e4cd d693e4cdd693e4cd d693e4cdd693e4cd d693e4cdd693e4cd d693e4cdd693e4cd d693e4cdd693e4cd ZMM26=b6f1625bb6f1625b b6f1625bb6f1625b b6f1625bb6f1625b b6f1625bb6f1625b b6f1625bb6f1625b b6f1625bb6f1625b b6f1625bb6f1625b b6f1625bb6f1625b ZMM27=586f6abf586f6abf 586f6abf586f6abf 586f6abf586f6abf 586f6abf586f6abf 586f6abf586f6abf 586f6abf586f6abf 586f6abf586f6abf 586f6abf586f6abf ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4e0800004e080000 4e0800004e080000 4e0800004e080000 4e0800004e080000 4e0800004e080000 4e0800004e080000 4e0800004e080000 4e0800004e080000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc27c5 RDI=ffffffff9a516680 RBP=ffffffff9a516640 RSP=ffffc9002c9ff660 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002e R14=ffffffff84fc2760 R15=0000000000000000 RIP=ffffffff84fc27ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006b4b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000019000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000