last executing test programs: 3.58965038s ago: executing program 1 (id=135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 3.090900364s ago: executing program 3 (id=148): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x82) 2.719280348s ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) unlink(0x0) 2.660780618s ago: executing program 1 (id=154): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003c00)=""/216, 0xd8}], 0x1}, 0x0) 2.600638115s ago: executing program 1 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xffbf) 2.008401173s ago: executing program 3 (id=156): close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040095e81cec5582005900000400000001000000190000009c662817e44bec8a6b8b589359a854b30e4b24ac363891da1e437176d591916d8b9ad09b6e0b55d63795faedee0c25374888fa58a8327a32c4ea10ae6e90e009776049c9f4c0fb9cc146f1dab066063a224c235f21ac93ed9b7c955eed0312193b"], 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.949439346s ago: executing program 3 (id=157): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.949210848s ago: executing program 0 (id=158): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000071112c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.94891391s ago: executing program 0 (id=160): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000090000000000000000000071141600000000009500000000000000434009e924512e75dc346e3f16945879f546030d74b6d3eaec434878e8e153bdcb26248495a98a73992d8e18094984ae2550bc534509acc05169959b9e94b2236dfccb3654f94870dd54773c20b4"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) 1.879205928s ago: executing program 3 (id=161): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007111160000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.878970487s ago: executing program 0 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='fdb_delete\x00'}, 0x18) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1.81096905s ago: executing program 3 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e030800d3ff71ef288543"], 0xffdd) 1.149419265s ago: executing program 1 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x11, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x8c941, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000d226312eb429ed58257d84bcec6a4dbe940e10f4"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) 1.100627444s ago: executing program 3 (id=165): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x3f, {0x3b4, 0x6d3}, 0x6}, 0x1) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0xc9}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)=0x1800) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1.100394385s ago: executing program 0 (id=166): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000380)={0x5, 0x8b}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) getpid() setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000001280)) 1.10025323s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000080), 0x0}, 0x20) 942.892593ms ago: executing program 2 (id=168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) 818.984419ms ago: executing program 0 (id=169): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 331.550486ms ago: executing program 2 (id=170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 331.301034ms ago: executing program 2 (id=171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 240.039595ms ago: executing program 2 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 28.620377ms ago: executing program 2 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close(r0) 26.305843ms ago: executing program 0 (id=174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0xffdd) 0s ago: executing program 1 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3656' (ED25519) to the list of known hosts. [ 46.792996][ T5939] cgroup: Unknown subsys name 'net' [ 46.962832][ T5939] cgroup: Unknown subsys name 'cpuset' [ 46.966784][ T5939] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.093423][ T5939] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.211817][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.214727][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.217213][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.220524][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.223243][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.227062][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.231512][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.235574][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.235717][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.240011][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.242097][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.245481][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.248217][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.249531][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.252010][ T5971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.255293][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.273446][ T5970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.280120][ T5970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.283205][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.285785][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.571226][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 52.655642][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 52.662520][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 52.778922][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.781716][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.784549][ T5956] bridge_slave_0: entered allmulticast mode [ 52.787499][ T5956] bridge_slave_0: entered promiscuous mode [ 52.794560][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 52.802954][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.805778][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.808291][ T5956] bridge_slave_1: entered allmulticast mode [ 52.811150][ T5956] bridge_slave_1: entered promiscuous mode [ 52.949998][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.993291][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.995603][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.997856][ T5964] bridge_slave_0: entered allmulticast mode [ 53.000598][ T5964] bridge_slave_0: entered promiscuous mode [ 53.017263][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.019500][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.021966][ T5967] bridge_slave_0: entered allmulticast mode [ 53.024528][ T5967] bridge_slave_0: entered promiscuous mode [ 53.029395][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.039050][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.042228][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.045235][ T5964] bridge_slave_1: entered allmulticast mode [ 53.049058][ T5964] bridge_slave_1: entered promiscuous mode [ 53.052541][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.055056][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.057456][ T5967] bridge_slave_1: entered allmulticast mode [ 53.060346][ T5967] bridge_slave_1: entered promiscuous mode [ 53.222794][ T5956] team0: Port device team_slave_0 added [ 53.224776][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.227216][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.230163][ T5955] bridge_slave_0: entered allmulticast mode [ 53.233826][ T5955] bridge_slave_0: entered promiscuous mode [ 53.240561][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.246667][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.252787][ T5956] team0: Port device team_slave_1 added [ 53.255673][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.258394][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.261608][ T5955] bridge_slave_1: entered allmulticast mode [ 53.265201][ T5955] bridge_slave_1: entered promiscuous mode [ 53.269174][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.273485][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.408382][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.415402][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.426016][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.432853][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.486881][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.489702][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.498941][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.504239][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.510628][ T5964] team0: Port device team_slave_0 added [ 53.515505][ T5967] team0: Port device team_slave_0 added [ 53.541516][ T5964] team0: Port device team_slave_1 added [ 53.545417][ T5967] team0: Port device team_slave_1 added [ 53.664599][ T5955] team0: Port device team_slave_0 added [ 53.679902][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.682809][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.694076][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.699126][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.702026][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.713364][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.719725][ T5955] team0: Port device team_slave_1 added [ 53.736209][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.738389][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.746397][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.750518][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.753390][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.763826][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.789769][ T5956] hsr_slave_0: entered promiscuous mode [ 53.793287][ T5956] hsr_slave_1: entered promiscuous mode [ 53.830901][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.833283][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.841929][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.847093][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.849630][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.858984][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.018263][ T5964] hsr_slave_0: entered promiscuous mode [ 54.020809][ T5964] hsr_slave_1: entered promiscuous mode [ 54.023327][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.026131][ T5964] Cannot create hsr debugfs directory [ 54.052453][ T5967] hsr_slave_0: entered promiscuous mode [ 54.055613][ T5967] hsr_slave_1: entered promiscuous mode [ 54.058539][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.062035][ T5967] Cannot create hsr debugfs directory [ 54.071026][ T5955] hsr_slave_0: entered promiscuous mode [ 54.073899][ T5955] hsr_slave_1: entered promiscuous mode [ 54.075950][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.078368][ T5955] Cannot create hsr debugfs directory [ 54.260665][ T63] Bluetooth: hci1: command tx timeout [ 54.330268][ T63] Bluetooth: hci0: command tx timeout [ 54.330598][ T5957] Bluetooth: hci2: command tx timeout [ 54.332311][ T5970] Bluetooth: hci3: command tx timeout [ 54.494782][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.500409][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.504410][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.512593][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.538717][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.550162][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.556273][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.571381][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.627578][ T5964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.641236][ T5964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.646625][ T5964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.651480][ T5964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.682394][ T5967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.688348][ T5967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.695667][ T5967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.708199][ T5967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.748462][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.792668][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.807921][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.815778][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.818358][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.843841][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.846814][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.862682][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.873463][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.888850][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.891267][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.906323][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.908752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.917736][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.922367][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.934655][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.937238][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.948163][ T5956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.971979][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.975057][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.983944][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.007651][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.010471][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.025916][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.028358][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.036727][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.117362][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.164537][ T5956] veth0_vlan: entered promiscuous mode [ 55.170496][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.175860][ T5956] veth1_vlan: entered promiscuous mode [ 55.211658][ T5956] veth0_macvtap: entered promiscuous mode [ 55.217004][ T5956] veth1_macvtap: entered promiscuous mode [ 55.234460][ T5955] veth0_vlan: entered promiscuous mode [ 55.239396][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.244066][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.254822][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.261603][ T5955] veth1_vlan: entered promiscuous mode [ 55.265708][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.270415][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.273914][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.277486][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.307802][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.345092][ T5955] veth0_macvtap: entered promiscuous mode [ 55.356973][ T5964] veth0_vlan: entered promiscuous mode [ 55.363117][ T5955] veth1_macvtap: entered promiscuous mode [ 55.373850][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.374997][ T5964] veth1_vlan: entered promiscuous mode [ 55.377162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.405687][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.420586][ T5967] veth0_vlan: entered promiscuous mode [ 55.431544][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.436824][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.439757][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.440249][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.445868][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.449467][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.453499][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.459056][ T5967] veth1_vlan: entered promiscuous mode [ 55.468623][ T5964] veth0_macvtap: entered promiscuous mode [ 55.486112][ T5964] veth1_macvtap: entered promiscuous mode [ 55.500577][ T5956] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.515710][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.527523][ T5967] veth0_macvtap: entered promiscuous mode [ 55.535312][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.554591][ T5967] veth1_macvtap: entered promiscuous mode [ 55.562225][ T5964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.563647][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.565009][ T5964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.567496][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.570381][ T5964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.575324][ T5964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.600730][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.601860][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.604268][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.616020][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.623040][ T5967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.626774][ T5967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.629500][ T5967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.632960][ T5967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.686865][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.690613][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.725831][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.730288][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.748461][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.755479][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.788592][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.799437][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.860534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.863956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.340000][ T5970] Bluetooth: hci1: command tx timeout [ 56.410670][ T5970] Bluetooth: hci3: command tx timeout [ 56.413063][ T5970] Bluetooth: hci0: command tx timeout [ 56.419992][ T5970] Bluetooth: hci2: command tx timeout [ 56.855773][ T60] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x7 [ 56.860176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.876276][ T60] hid-generic 00A0:0008:0003.0002: item fetching failed at offset 14/15 [ 56.882093][ T60] hid-generic 00A0:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 57.020178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.140500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 57.144071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 57.147787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 57.511090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 57.514616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.716378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.419959][ T5957] Bluetooth: hci1: command tx timeout [ 58.490226][ T5957] Bluetooth: hci3: command tx timeout [ 58.492527][ T5957] Bluetooth: hci2: command tx timeout [ 58.493153][ T63] Bluetooth: hci0: command tx timeout [ 58.681104][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.753328][ T6095] Zero length message leads to an empty skb [ 59.053412][ T6103] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 59.105791][ T6104] overlayfs: failed to resolve './file0': -2 [ 59.113862][ T6104] netlink: 'syz.2.11': attribute type 30 has an invalid length. [ 59.633770][ T6110] ALSA: mixer_oss: invalid OSS volume '' [ 60.068160][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 60.071474][ T6120] netlink: 'syz.1.16': attribute type 5 has an invalid length. [ 60.074505][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 60.089718][ T6120] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 60.093249][ T6120] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 60.096022][ T6120] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 60.099371][ T6120] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 60.103383][ T6120] geneve2: entered promiscuous mode [ 60.105539][ T6120] geneve2: entered allmulticast mode [ 60.490184][ T5962] Bluetooth: hci1: command tx timeout [ 60.570513][ T5962] Bluetooth: hci2: command tx timeout [ 60.572699][ T5962] Bluetooth: hci0: command tx timeout [ 60.574391][ T5962] Bluetooth: hci3: command 0x0419 tx timeout [ 60.979903][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 60.983109][ T6123] netlink: 'syz.0.18': attribute type 5 has an invalid length. [ 60.983771][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 60.985696][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18'. [ 60.993256][ T6132] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 61.013413][ T6123] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 61.017293][ T6123] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 61.020542][ T6123] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 61.024091][ T6123] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 61.027992][ T6123] geneve2: entered promiscuous mode [ 61.030352][ T6123] geneve2: entered allmulticast mode [ 61.091747][ T6132] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.465420][ T6147] io-wq is not configured for unbound workers [ 61.867437][ T6176] hugetlbfs: Bad value 'ß' for mount option 'size' [ 61.867437][ T6176] [ 62.274865][ T6045] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x7 [ 62.279506][ T6045] hid-generic 00A0:0008:0003.0003: item fetching failed at offset 14/15 [ 62.287365][ T6045] hid-generic 00A0:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 62.658458][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 63.771527][ T6207] netlink: 240 bytes leftover after parsing attributes in process `syz.0.32'. [ 63.774768][ T6207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.32'. [ 64.348903][ T6220] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.396973][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 64.402863][ T6223] netlink: 1 bytes leftover after parsing attributes in process `syz.3.35'. [ 64.628029][ T6230] AppArmor: change_hat: Invalid input '0x' [ 64.638890][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'. [ 65.224191][ T6241] __nla_validate_parse: 1 callbacks suppressed [ 65.224202][ T6241] netlink: 240 bytes leftover after parsing attributes in process `syz.3.42'. [ 65.228851][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.42'. [ 65.886700][ T6252] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.890584][ T6252] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.894365][ T6252] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.898097][ T6252] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.902844][ T6252] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.906794][ T6252] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.911026][ T6252] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.914822][ T6252] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 65.919091][ T6252] geneve2: entered promiscuous mode [ 65.922042][ T6252] geneve2: entered allmulticast mode [ 66.513025][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 66.515943][ T6244] netlink: 'syz.1.43': attribute type 5 has an invalid length. [ 66.518220][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 66.611196][ T6264] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 68.509936][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 68.873515][ T6317] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 68.882108][ T6317] bond0: (slave wlan1): Opening slave failed [ 68.918549][ T61] bond0: (slave bond_slave_0): interface is now down [ 68.923339][ T61] bond0: (slave bond_slave_1): interface is now down [ 68.928203][ T61] bond0: now running without any active interface! [ 68.931677][ T6317] netlink: 'syz.3.60': attribute type 10 has an invalid length. [ 68.940932][ T6317] syz_tun: entered promiscuous mode [ 68.955850][ T6321] binder: 6319:6321 ioctl c0046209 0 returned -22 [ 69.032096][ T13] bond0: (slave syz_tun): interface is now down [ 69.052032][ T13] bond0: (slave syz_tun): interface is now down [ 69.058061][ T6317] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.090282][ T81] bond0: (slave syz_tun): interface is now down [ 69.130614][ T46] bond0: (slave syz_tun): interface is now down [ 69.143900][ T46] bond0: now running without any active interface! [ 69.704100][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 70.108348][ T6340] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 70.111420][ T6340] UDF-fs: Scanning with blocksize 2048 failed [ 70.114917][ T6340] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 70.117170][ T6340] UDF-fs: Scanning with blocksize 4096 failed [ 70.126973][ T6340] netlink: 'syz.1.62': attribute type 12 has an invalid length. [ 70.129391][ T6340] netlink: 'syz.1.62': attribute type 29 has an invalid length. [ 70.131806][ T6340] netlink: 148 bytes leftover after parsing attributes in process `syz.1.62'. [ 70.134891][ T6340] netlink: 59 bytes leftover after parsing attributes in process `syz.1.62'. [ 70.384662][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 70.845088][ T836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.894602][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.896772][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.011543][ T836] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 71.050644][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.054013][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.070570][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.077820][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.092013][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.095845][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.098965][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.105464][ T6386] Cannot find add_set index 0 as target [ 71.110386][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.119145][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.130167][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.133723][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.138021][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.144205][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.146959][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.151765][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.155891][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.158545][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.164260][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.171534][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.174665][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.177975][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.182626][ T836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 71.189912][ T836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 71.193391][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.203711][ T836] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 71.210090][ T836] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 71.213204][ T836] usb 6-1: Product: syz [ 71.214541][ T836] usb 6-1: Manufacturer: syz [ 71.216005][ T836] usb 6-1: SerialNumber: syz [ 71.220362][ T836] usb 6-1: config 0 descriptor?? [ 71.229151][ T836] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 71.341803][ T6003] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.422604][ T6400] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 71.435350][ T836] usb 6-1: USB disconnect, device number 2 [ 71.468084][ T836] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 71.499915][ T6003] usb 5-1: device descriptor read/64, error -71 [ 71.750904][ T6003] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.979870][ T6003] usb 5-1: device descriptor read/64, error -71 [ 72.030276][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 72.034370][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 72.048946][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 72.052270][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 72.090219][ T6003] usb usb5-port1: attempt power cycle [ 72.452290][ T6424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.500916][ T6003] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.667525][ T6003] usb 5-1: device descriptor read/8, error -71 [ 72.909951][ T6003] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.933888][ T6003] usb 5-1: device descriptor read/8, error -71 [ 73.050925][ T6003] usb usb5-port1: unable to enumerate USB device [ 73.837216][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 73.841950][ T6437] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 73.845272][ T6437] bond0: (slave wlan1): Opening slave failed [ 74.447218][ T6446] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 74.470418][ T6446] batman_adv: batadv0: Adding interface: team0 [ 74.472452][ T6446] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.489889][ T6446] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.509985][ T6222] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.671643][ T6222] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 74.675629][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.678396][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.681957][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.684921][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.687851][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.691405][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.694627][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.697191][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.701086][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.704410][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.707279][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.711301][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.714384][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.719376][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.723467][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.727150][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.732486][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.736070][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.738992][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.742654][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.746270][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.749354][ T6222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.753791][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.757348][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.763071][ T6222] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 74.766599][ T6222] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 74.769304][ T6222] usb 5-1: Product: syz [ 74.771842][ T6222] usb 5-1: Manufacturer: syz [ 74.773337][ T6222] usb 5-1: SerialNumber: syz [ 74.779933][ T6222] usb 5-1: config 0 descriptor?? [ 74.801743][ T6222] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 74.999507][ T6222] usb 5-1: USB disconnect, device number 6 [ 75.006390][ T6222] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 75.142346][ T6461] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.569774][ T6467] Cannot find add_set index 0 as target [ 75.940106][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 76.249878][ T10] hid-generic 00A0:0008:0003.0004: unknown main item tag 0x7 [ 76.259997][ T10] hid-generic 00A0:0008:0003.0004: item fetching failed at offset 14/15 [ 76.263509][ T10] hid-generic 00A0:0008:0003.0004: probe with driver hid-generic failed with error -22 [ 76.639163][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 76.643150][ T6501] netlink: 'syz.2.92': attribute type 5 has an invalid length. [ 76.646358][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 76.655651][ T6501] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 76.659237][ T6501] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 76.671359][ T6501] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 76.675104][ T6501] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 76.679090][ T6501] geneve2: entered promiscuous mode [ 76.782223][ T6501] geneve2: entered allmulticast mode [ 76.956947][ T6505] input: syz0 as /devices/virtual/input/input5 [ 77.962461][ T6518] netlink: 240 bytes leftover after parsing attributes in process `syz.1.95'. [ 77.973608][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.95'. [ 78.664140][ T6545] overlayfs: missing 'lowerdir' [ 78.893051][ T5970] Bluetooth: hci3: command 0x0419 tx timeout [ 79.691940][ T6558] random: crng reseeded on system resumption [ 79.927413][ T5994] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x7 [ 79.946095][ T5994] hid-generic 00A0:0008:0003.0005: item fetching failed at offset 14/15 [ 79.950770][ T5994] hid-generic 00A0:0008:0003.0005: probe with driver hid-generic failed with error -22 [ 80.009735][ T6569] mmap: syz.2.105 (6569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.104054][ T6563] netlink: 680 bytes leftover after parsing attributes in process `syz.2.105'. [ 80.196202][ T6569] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 80.198608][ T6569] netlink: 224 bytes leftover after parsing attributes in process `syz.2.105'. [ 81.201612][ T34] cfg80211: failed to load regulatory.db [ 81.634903][ T6583] netlink: 240 bytes leftover after parsing attributes in process `syz.0.110'. [ 81.637816][ T6583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.110'. [ 81.749243][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 81.910844][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 81.914096][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.917000][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.920695][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.923803][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.926568][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.930231][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.933236][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.936027][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.939934][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.943592][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.967585][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.974315][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.977538][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.980392][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.983802][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.986748][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.989472][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.992908][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.995856][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.998694][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.002069][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.005020][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.007938][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.011321][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 82.015692][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 82.018484][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 82.021099][ T10] usb 8-1: Product: syz [ 82.022465][ T10] usb 8-1: Manufacturer: syz [ 82.023935][ T10] usb 8-1: SerialNumber: syz [ 82.028854][ T10] usb 8-1: config 0 descriptor?? [ 82.034622][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 82.083681][ T6599] Cannot find add_set index 0 as target [ 82.235054][ T10] usb 8-1: USB disconnect, device number 2 [ 82.242668][ T10] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 82.379861][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.024237][ T6613] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 83.176120][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 83.178967][ T6616] netlink: 'syz.1.119': attribute type 5 has an invalid length. [ 83.181518][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.119'. [ 85.986005][ T6699] pim6reg1: entered promiscuous mode [ 85.987769][ T6699] pim6reg1: entered allmulticast mode [ 86.846695][ T6721] pim6reg1: entered promiscuous mode [ 86.848906][ T6721] pim6reg1: entered allmulticast mode [ 87.907267][ T6742] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 87.914458][ T6742] batman_adv: batadv0: Adding interface: team0 [ 87.916481][ T6742] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.960496][ T6742] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 87.974702][ T6742] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 87.978342][ T6742] netlink: 2 bytes leftover after parsing attributes in process `syz.3.165'. [ 87.982696][ T6742] team0: entered promiscuous mode [ 87.984939][ T6742] team_slave_0: entered promiscuous mode [ 87.987541][ T6742] team_slave_1: entered promiscuous mode [ 88.161096][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.163642][ T6742] batman_adv: batadv0: Interface activated: team0 [ 88.165863][ T6742] batman_adv: batadv0: Interface deactivated: team0 [ 88.168167][ T6742] batman_adv: batadv0: Removing interface: team0 [ 88.172767][ T6742] bridge0: port 3(team0) entered blocking state [ 88.176967][ T6742] bridge0: port 3(team0) entered disabled state [ 88.179542][ T6742] team0: entered allmulticast mode [ 88.183418][ T6742] team_slave_0: entered allmulticast mode [ 88.184364][ T6761] [ 88.185222][ T6742] team_slave_1: entered allmulticast mode [ 88.186220][ T6761] ============================= [ 88.189234][ T6742] bridge0: port 3(team0) entered blocking state [ 88.189464][ T6761] WARNING: suspicious RCU usage [ 88.189470][ T6761] 6.16.0-rc7-syzkaller #0 Not tainted [ 88.191614][ T6742] bridge0: port 3(team0) entered forwarding state [ 88.199398][ T6761] ----------------------------- [ 88.201026][ T6761] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 88.203697][ T6761] [ 88.203697][ T6761] other info that might help us debug this: [ 88.203697][ T6761] [ 88.207407][ T6761] [ 88.207407][ T6761] rcu_scheduler_active = 2, debug_locks = 1 [ 88.210127][ T6761] 1 lock held by syz.1.175/6761: [ 88.211736][ T6761] #0: ffffffff8e5c4300 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 88.215243][ T6761] [ 88.215243][ T6761] stack backtrace: [ 88.217219][ T6761] CPU: 3 UID: 0 PID: 6761 Comm: syz.1.175 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 88.217244][ T6761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.217251][ T6761] Call Trace: [ 88.217256][ T6761] [ 88.217260][ T6761] dump_stack_lvl+0x16c/0x1f0 [ 88.217276][ T6761] lockdep_rcu_suspicious+0x166/0x260 [ 88.217293][ T6761] get_callchain_entry+0x278/0x3f0 [ 88.217312][ T6761] get_perf_callchain+0xdb/0x760 [ 88.217330][ T6761] ? __pfx_get_perf_callchain+0x10/0x10 [ 88.217345][ T6761] ? sched_clock_cpu+0x6c/0x530 [ 88.217362][ T6761] ? __pfx___schedule+0x10/0x10 [ 88.217380][ T6761] __bpf_get_stack+0x4f5/0xa10 [ 88.217398][ T6761] ? __pfx___bpf_get_stack+0x10/0x10 [ 88.217418][ T6761] bpf_get_stack+0x32/0x40 [ 88.217434][ T6761] bpf_get_stack_raw_tp+0x1dd/0x280 [ 88.217450][ T6761] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 88.217460][ T6761] bpf_prog_test_run_syscall+0x5b3/0x780 [ 88.217473][ T6761] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 88.217485][ T6761] ? fput+0x70/0xf0 [ 88.217497][ T6761] ? __bpf_prog_get+0x97/0x2a0 [ 88.217509][ T6761] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 88.217521][ T6761] __sys_bpf+0x1707/0x4ea0 [ 88.217529][ T6761] ? __pfx_futex_wake+0x10/0x10 [ 88.217544][ T6761] ? __pfx___sys_bpf+0x10/0x10 [ 88.217554][ T6761] ? __lock_acquire+0xb8a/0x1c90 [ 88.217568][ T6761] ? do_futex+0x122/0x350 [ 88.217581][ T6761] ? __pfx_do_futex+0x10/0x10 [ 88.217600][ T6761] ? xfd_validate_state+0x61/0x180 [ 88.217616][ T6761] __ia32_sys_bpf+0x76/0xe0 [ 88.217628][ T6761] __do_fast_syscall_32+0x7c/0x3a0 [ 88.217640][ T6761] do_fast_syscall_32+0x32/0x80 [ 88.217650][ T6761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.217662][ T6761] RIP: 0023:0xf70ae579 [ 88.217670][ T6761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.217680][ T6761] RSP: 002b:00000000f509e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 88.217689][ T6761] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800004c0 [ 88.217695][ T6761] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 88.217701][ T6761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.217706][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.217711][ T6761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.217724][ T6761] VM DIAGNOSIS: 06:37:57 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff8c423340 RCX=ffffc9000c001000 RDX=1ffffffff36169dc RSI=ffffffff825f3985 RDI=0000000000000005 RBP=ffffffff8c423360 RSP=ffffc90007367a10 R8 =0000000000000005 R9 =00000000ffffffff R10=0000000000000000 R11=0000000000000001 R12=ffff88805f2a0718 R13=ffffffff8c4238e0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb54d8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809752d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f93d4bb5000 CR3=000000004c2a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000010410101 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9232d08 00007ffcc9232d08 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9232ee0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555a5a61f760 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93d45f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93d45f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730ce0a72c51a3 73732629291fbf33 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737373737371b852 7373737373730a07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 716d2f30706f6f6c 2f6b636f6c622f6c 6175747269762f73 6563697665642f73 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4057444d560a4657 560a0b0b0a0b0b00 41480a4e464a4947 0a000a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f30303a53 55425953584e4c2f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000002cb21 0000000000007974 00736576616c7300 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000101897 RBX=0000000000000001 RCX=ffffffff8b82ac69 RDX=0000000000000000 RSI=ffffffff8de29c33 RDI=ffffffff8c155de0 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90a95b50 R15=0000000000000000 RIP=ffffffff8b8297cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809762d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003011fffc CR3=0000000068e5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000168cbb RBX=0000000000000002 RCX=ffffffff8b82ac69 RDX=0000000000000000 RSI=ffffffff8de29c33 RDI=ffffffff8c155de0 RBP=ffffed1003bdb910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dedc880 R14=ffffffff90a95b50 R15=0000000000000000 RIP=ffffffff8b8297cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809772d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c34572c CR3=0000000069d86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556d065 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc9000366f470 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b09f500 R15=ffffffff8556d000 RIP=ffffffff8556d08f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809782d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c264f7b CR3=00000000712a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000