last executing test programs: 1m41.992053792s ago: executing program 1 (id=243): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0xdb5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="010023bd7000000020003b00000008000300", @ANYRES32=r2, @ANYBLOB="2b00330030b0f800ffffffffffff080211000000505050505050050010008f0110000d0001000103c8ecb60092003300802009000802110000010802110000005050505050509f0003000000000000006400001003010597054e4091e6e2ec4cef54c9a294df075c2e4b966575a70d860e2f4fa504a10b114a6fc96468b2283b4b439c9f4a3983742e32299e6d3fc6acdf030b25030007072a01042d1a768616020000000000000006004700110000000104"], 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m41.914931157s ago: executing program 1 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x5}}}}]}, 0x44}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 1m41.854081224s ago: executing program 1 (id=247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 1m40.978715523s ago: executing program 1 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x20180, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020) 1m40.92084382s ago: executing program 1 (id=254): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r4, 0xfffffffffffffc01, 0x0) tee(r0, r4, 0x60000002000, 0x0) vmsplice(r3, &(0x7f0000002600)=[{&(0x7f00000002c0)="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", 0x1000}], 0x1, 0x8) 1m40.664107461s ago: executing program 1 (id=265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x79a5, 0x2, 0x46, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 1m40.529089863s ago: executing program 32 (id=265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x7d4b, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x79a5, 0x2, 0x46, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 1m7.25193761s ago: executing program 2 (id=567): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44080) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) 1m7.184547005s ago: executing program 2 (id=569): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) dup2(r3, r1) flock(r3, 0x1) flock(r3, 0x2) flock(r1, 0x2) close(r0) 1m6.33762081s ago: executing program 2 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 1m6.293541679s ago: executing program 2 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m6.293120558s ago: executing program 2 (id=579): sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x8}]}}]}, 0x38}}, 0x40840) 1m6.035921206s ago: executing program 2 (id=588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m5.98569707s ago: executing program 33 (id=588): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 48.469958749s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 42.825403749s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 42.527375927s ago: executing program 0 (id=786): socket$inet6(0xa, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000001b7333e65476f0bd7c3c6e544e9694a19f9310654e8501aad84c6f74b275aabd571ffda887"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 42.391519341s ago: executing program 4 (id=787): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfd}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x80) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000540)={0x1d, r5, 0x0, {0x0, 0xff, 0x3}, 0xfd}, 0x18) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000380)="14055f7e4487be4648", 0x6f9}], 0x1) 40.107631369s ago: executing program 4 (id=801): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 39.699255026s ago: executing program 4 (id=794): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 39.298485823s ago: executing program 4 (id=795): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 39.293441965s ago: executing program 4 (id=796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0xfffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x5) setsockopt(0xffffffffffffffff, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002980), 0x400000000000239, 0x0) accept4(r1, 0x0, 0x0, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 38.766630234s ago: executing program 4 (id=797): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004044) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 38.765078171s ago: executing program 34 (id=797): openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004044) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 35.46079623s ago: executing program 0 (id=786): socket$inet6(0xa, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000001b7333e65476f0bd7c3c6e544e9694a19f9310654e8501aad84c6f74b275aabd571ffda887"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 33.55415677s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 28.672023344s ago: executing program 0 (id=786): socket$inet6(0xa, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000001b7333e65476f0bd7c3c6e544e9694a19f9310654e8501aad84c6f74b275aabd571ffda887"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 24.014579824s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 16.812720593s ago: executing program 0 (id=786): socket$inet6(0xa, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000001b7333e65476f0bd7c3c6e544e9694a19f9310654e8501aad84c6f74b275aabd571ffda887"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 16.490068935s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 10.362163279s ago: executing program 0 (id=786): socket$inet6(0xa, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000001b7333e65476f0bd7c3c6e544e9694a19f9310654e8501aad84c6f74b275aabd571ffda887"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 9.607305081s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.290112943s ago: executing program 6 (id=926): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.092994471s ago: executing program 6 (id=927): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x7d, &(0x7f0000000600)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(r0, 0x0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001680)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.815388951s ago: executing program 3 (id=928): io_setup(0x5, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r7, 0x1) 2.587990527s ago: executing program 6 (id=929): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 1.914394205s ago: executing program 0 (id=786): socket$inet6(0xa, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000001b7333e65476f0bd7c3c6e544e9694a19f9310654e8501aad84c6f74b275aabd571ffda887"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="01000000008d"}) 1.193547449s ago: executing program 6 (id=930): r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd_index=0x5, 0x7, 0x0, 0x0, 0x0, 0x1, {0x2, r6}}) setuid(0x0) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.183443418s ago: executing program 3 (id=931): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x74, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "67860e25ed2ac7e428414262f162e9838c6349a97658614dacb21d084d5b57347cda08770e701f274273c99872afcc497548cf967b4ae21b7a842670975efa8ce8e59b733b393b05a28b87c38b088bdb63"}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000044) r1 = dup(r0) r2 = syz_open_dev$dri(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) syz_clone3(&(0x7f0000000480)={0x42000200, 0x0, 0x0, 0x0, {0x19}, &(0x7f0000000340)=""/157, 0x9d, 0x0, 0x0}, 0x58) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 860.878307ms ago: executing program 3 (id=932): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 827.318251ms ago: executing program 3 (id=933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000030000000038000007"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280), 0x4e, r2, 0x0, 0x1c000000007400}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 763.498765ms ago: executing program 3 (id=934): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000100)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 198.780779ms ago: executing program 6 (id=935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000430007010000000000000000047c0000080001"], 0x1c}}, 0x48844) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x7, 0x3, 0x5}}, 0x20, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x7}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000104050000000700000000000700000305000100010000000a00020000000003a7"], 0x48}, 0x1, 0x0, 0x0, 0x20040024}, 0x0) 91.011585ms ago: executing program 3 (id=936): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x1, 0x3e, 0x0, &(0x7f0000000280)) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=937): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) kernel console output (not intermixed with test programs): uous mode [ 100.016676][ T7539] bond2: (slave ip6erspan0): making interface the new active one [ 100.021167][ T7539] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 100.036512][ T7544] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 100.957828][ T5290] Bluetooth: hci3: unexpected event for opcode 0x041c [ 101.080292][ T5987] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 101.107925][ T5987] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 101.580470][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 101.741242][ T7602] uprobe: syz.3.490:7602 failed to unregister, leaking uprobe [ 101.822997][ T7607] syz_tun: entered allmulticast mode [ 101.989167][ T7607] dvmrp1: entered allmulticast mode [ 102.011124][ T7606] syz_tun: left allmulticast mode [ 102.698464][ T7620] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 103.220092][ T6002] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 103.223943][ T6002] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 104.307820][ T7683] netlink: 'syz.0.519': attribute type 33 has an invalid length. [ 104.311067][ T7683] netlink: 152 bytes leftover after parsing attributes in process `syz.0.519'. [ 104.317676][ T7683] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 104.344166][ T7021] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 104.496517][ T7021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.500854][ T7021] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 104.505397][ T7021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.512833][ T7021] usb 8-1: config 0 descriptor?? [ 104.518254][ T7681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.984013][ T5955] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 104.987565][ T5955] Bluetooth: hci3: Injecting HCI hardware error event [ 104.990848][ T5955] Bluetooth: hci3: hardware error 0x00 [ 105.228583][ T7021] usbhid 8-1:0.0: can't add hid device: -71 [ 105.230652][ T7021] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 105.235962][ T7021] usb 8-1: USB disconnect, device number 3 [ 105.488713][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.530'. [ 105.492388][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 105.506378][ T7709] geneve2: entered allmulticast mode [ 105.564873][ T66] IPVS: starting estimator thread 0... [ 105.585434][ T7721] netlink: 56 bytes leftover after parsing attributes in process `syz.2.533'. [ 105.606309][ T40] audit: type=1326 audit(2000000006.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.0.534" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7fc00000 [ 105.653443][ T40] audit: type=1326 audit(2000000006.869:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.0.534" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704e579 code=0x7fc00000 [ 105.660833][ T40] audit: type=1326 audit(2000000006.869:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.0.534" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704e5a7 code=0x7fc00000 [ 105.664349][ T7719] IPVS: using max 28 ests per chain, 67200 per kthread [ 105.682476][ T40] audit: type=1326 audit(2000000006.869:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.0.534" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x7fc00000 [ 105.744000][ T6001] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 105.805722][ T7726] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 105.820720][ T67] IPVS: stop unused estimator thread 0... [ 105.915460][ T6001] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.918824][ T6001] usb 9-1: config 0 has no interface number 0 [ 105.925088][ T6001] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 105.932811][ T6001] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 105.937594][ T6001] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.941680][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.947658][ T6001] usb 9-1: config 0 descriptor?? [ 105.950071][ T7713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.961263][ T6001] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 106.169910][ T7021] usb 9-1: USB disconnect, device number 2 [ 106.171912][ C3] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 106.240442][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 106.344054][ T5290] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 106.354273][ T5290] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.773040][ T7749] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.064072][ T5955] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 107.407475][ T7767] syzkaller0: entered promiscuous mode [ 107.409685][ T7767] syzkaller0: entered allmulticast mode [ 107.446872][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 107.451595][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 107.455583][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 107.493071][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 107.631886][ T7774] Bluetooth: MGMT ver 1.23 [ 107.658358][ T7774] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 107.778854][ T7778] netlink: 'syz.0.554': attribute type 7 has an invalid length. [ 107.781809][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 110.034563][ T67] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.124940][ T67] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.200914][ T5290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.205287][ T5290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.209226][ T5290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.214165][ T838] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 110.214692][ T67] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.215779][ T5290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.216275][ T5290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.293035][ T67] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.353324][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 110.365734][ T838] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.373967][ T838] usb 8-1: config 0 has no interface number 0 [ 110.376910][ T838] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 110.381507][ T838] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 110.387693][ T838] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.391441][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.402193][ T838] usb 8-1: config 0 descriptor?? [ 110.404354][ T7856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.413347][ T838] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 110.474758][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.477073][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.479930][ T7868] bridge_slave_0: entered allmulticast mode [ 110.482545][ T7868] bridge_slave_0: entered promiscuous mode [ 110.491781][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.495047][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.498019][ T7868] bridge_slave_1: entered allmulticast mode [ 110.501689][ T7868] bridge_slave_1: entered promiscuous mode [ 110.568675][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.581618][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.584909][ T67] bridge_slave_1: left allmulticast mode [ 110.587045][ T67] bridge_slave_1: left promiscuous mode [ 110.589348][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.595633][ T67] bridge_slave_0: left allmulticast mode [ 110.597505][ T67] bridge_slave_0: left promiscuous mode [ 110.599603][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.625949][ T838] usb 8-1: USB disconnect, device number 4 [ 110.628316][ C3] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 110.732497][ T67] dvmrp1 (unregistering): left allmulticast mode [ 110.750020][ T67] team0: Port device geneve0 removed [ 111.087010][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.090170][ T67] bond_slave_0: left promiscuous mode [ 111.093045][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.096323][ T67] bond_slave_1: left promiscuous mode [ 111.098696][ T67] bond0 (unregistering): Released all slaves [ 111.105662][ T67] bond1 (unregistering): (slave veth3): Releasing backup interface [ 111.109173][ T67] bond1 (unregistering): Released all slaves [ 111.115484][ T67] bond2 (unregistering): Released all slaves [ 111.201213][ T7868] team0: Port device team_slave_0 added [ 111.212208][ T7868] team0: Port device team_slave_1 added [ 111.258452][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.261179][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.269163][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.273375][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.275617][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.284037][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.335752][ T7868] hsr_slave_0: entered promiscuous mode [ 111.338123][ T7868] hsr_slave_1: entered promiscuous mode [ 111.340298][ T7868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.343574][ T7868] Cannot create hsr debugfs directory [ 111.522264][ T7868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.528714][ T7868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.535007][ T7868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.541254][ T7868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.621652][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.640347][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.650996][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.653252][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.664675][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.667061][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.801730][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.943005][ T7868] veth0_vlan: entered promiscuous mode [ 111.952483][ T7868] veth1_vlan: entered promiscuous mode [ 111.990951][ T7868] veth0_macvtap: entered promiscuous mode [ 112.002268][ T7868] veth1_macvtap: entered promiscuous mode [ 112.013164][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.016534][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.021297][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.025587][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.029264][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.035799][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.044846][ T7868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.047700][ T7868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.051325][ T7868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.061147][ T7868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.099629][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.104003][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.123227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.134233][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.266191][ T7960] delete_channel: no stack [ 112.274104][ T5955] Bluetooth: hci1: command tx timeout [ 113.073964][ T67] hsr_slave_0: left promiscuous mode [ 113.082646][ T67] hsr_slave_1: left promiscuous mode [ 113.092442][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.096052][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.099301][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.103539][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.132844][ T67] veth1_macvtap: left promiscuous mode [ 113.134843][ T67] veth0_macvtap: left promiscuous mode [ 113.136953][ T67] veth1_vlan: left promiscuous mode [ 113.138731][ T67] veth0_vlan: left promiscuous mode [ 113.390539][ T8017] netlink: 'syz.5.618': attribute type 4 has an invalid length. [ 113.559826][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'. [ 113.832173][ T8026] netlink: 'syz.4.620': attribute type 4 has an invalid length. [ 113.863477][ T67] team0 (unregistering): Port device team_slave_1 removed [ 113.885494][ T8027] netlink: 'syz.4.620': attribute type 4 has an invalid length. [ 113.922526][ T67] team0 (unregistering): Port device team_slave_0 removed [ 114.340158][ T8012] : entered promiscuous mode [ 114.344241][ T5955] Bluetooth: hci1: command tx timeout [ 115.339202][ T8049] netlink: 'syz.3.626': attribute type 3 has an invalid length. [ 115.344578][ T5955] Bluetooth: hci0: Unable to find connection for big 0x00 [ 115.355496][ T8054] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 115.385551][ T8054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.416953][ T8054] bond3: (slave veth7): Enslaving as an active interface with a down link [ 115.755666][ T8084] tipc: Started in network mode [ 115.757271][ T8084] tipc: Node identity 7f000001, cluster identity 4711 [ 115.759635][ T8084] tipc: Enabling of bearer rejected, failed to enable media [ 115.771264][ T8084] tipc: Enabled bearer , priority 0 [ 115.943939][ T1324] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 116.123971][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 116.127261][ T1324] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.131065][ T1324] usb 8-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 116.134362][ T1324] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.141808][ T1324] usb 8-1: config 0 descriptor?? [ 116.424261][ T5955] Bluetooth: hci1: command tx timeout [ 116.458302][ T1324] usbhid 8-1:0.0: can't add hid device: -71 [ 116.466501][ T1324] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 116.475867][ T1324] usb 8-1: USB disconnect, device number 5 [ 116.884075][ T34] tipc: Node number set to 2130706433 [ 117.192536][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 117.196137][ T6007] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.237142][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 117.343998][ T6007] usb 5-1: Using ep0 maxpacket: 16 [ 117.347278][ T6007] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.350532][ T6007] usb 5-1: config 0 has no interface number 0 [ 117.356816][ T6007] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 117.359940][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.363036][ T6007] usb 5-1: Product: syz [ 117.364792][ T6007] usb 5-1: Manufacturer: syz [ 117.366352][ T6007] usb 5-1: SerialNumber: syz [ 117.369012][ T6007] usb 5-1: config 0 descriptor?? [ 117.377118][ T6007] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.577386][ T34] usb 5-1: USB disconnect, device number 2 [ 118.139099][ T8140] netlink: 'syz.0.658': attribute type 4 has an invalid length. [ 118.155798][ T8140] netlink: 'syz.0.658': attribute type 4 has an invalid length. [ 118.222914][ T8144] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 118.262757][ T8144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.328968][ T8144] bond1: (slave veth3): Enslaving as an active interface with a down link [ 118.370394][ T8144] ip6erspan0: entered promiscuous mode [ 118.372738][ T8144] ip6erspan0: entered allmulticast mode [ 118.380268][ T8144] bond1: (slave ip6erspan0): making interface the new active one [ 118.384782][ T8144] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 118.513956][ T5955] Bluetooth: hci1: command tx timeout [ 118.637340][ T8162] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 118.640514][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 118.650949][ T8162] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 118.653223][ T8162] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 119.054940][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 119.791234][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 119.882043][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 121.670832][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 121.709471][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 123.338981][ T40] audit: type=1326 audit(2000000024.559:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.716" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 123.942539][ T40] audit: type=1326 audit(2000000025.159:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.950818][ T40] audit: type=1326 audit(2000000025.159:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.958897][ T40] audit: type=1326 audit(2000000025.159:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.968207][ T40] audit: type=1326 audit(2000000025.159:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.976020][ T40] audit: type=1326 audit(2000000025.159:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.982773][ T40] audit: type=1326 audit(2000000025.159:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.989490][ T40] audit: type=1326 audit(2000000025.159:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 123.995792][ T40] audit: type=1326 audit(2000000025.159:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 124.002161][ T40] audit: type=1326 audit(2000000025.159:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 124.003983][ T7021] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 124.168322][ T7021] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 124.175205][ T7021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.181794][ T7021] usb 8-1: Product: syz [ 124.185959][ T7021] usb 8-1: Manufacturer: syz [ 124.191427][ T7021] usb 8-1: SerialNumber: syz [ 124.204428][ T7021] usb 8-1: config 0 descriptor?? [ 124.417310][ T7021] usb 8-1: USB disconnect, device number 6 [ 124.755869][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.724'. [ 124.811626][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.5.724'. [ 125.661313][ T8370] batadv_slave_1: entered promiscuous mode [ 125.694670][ T8383] netlink: zone id is out of range [ 125.696292][ T8369] batadv_slave_1: left promiscuous mode [ 125.696496][ T8383] netlink: zone id is out of range [ 125.700452][ T8383] netlink: zone id is out of range [ 125.702475][ T8383] netlink: zone id is out of range [ 125.705751][ T8383] netlink: zone id is out of range [ 125.715631][ T8383] netlink: zone id is out of range [ 125.717855][ T8383] netlink: zone id is out of range [ 125.719876][ T8383] netlink: zone id is out of range [ 125.721890][ T8383] netlink: zone id is out of range [ 125.725512][ T8383] netlink: zone id is out of range [ 126.322855][ T8415] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 126.336969][ T8415] bond2: entered promiscuous mode [ 126.338644][ T8415] bond2: entered allmulticast mode [ 126.383262][ T8415] bond3: entered allmulticast mode [ 126.386992][ T8415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.392240][ T8415] bond2: (slave bond3): Enslaving as an active interface with a down link [ 126.425409][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 126.430224][ T8415] bond2: left promiscuous mode [ 126.431747][ T8415] bond2: left allmulticast mode [ 126.433556][ T8415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.650622][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 127.615741][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.706691][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.767628][ T8462] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 127.771056][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.780527][ T5290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.784948][ T5290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.790105][ T5290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.793728][ T5290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.802190][ T8462] bond4: entered promiscuous mode [ 127.802522][ T5290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.805015][ T8462] bond4: entered allmulticast mode [ 127.829870][ T8462] bond5: entered allmulticast mode [ 127.832440][ T8462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 127.835945][ T8462] bond4: (slave bond5): Enslaving as an active interface with a down link [ 127.856376][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 127.860095][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.868781][ T8462] bond4: left promiscuous mode [ 127.870426][ T8462] bond4: left allmulticast mode [ 127.872233][ T8462] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.032766][ T13] bridge_slave_1: left allmulticast mode [ 128.035879][ T13] bridge_slave_1: left promiscuous mode [ 128.037810][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.041310][ T13] bridge_slave_0: left allmulticast mode [ 128.043103][ T13] bridge_slave_0: left promiscuous mode [ 128.045654][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.314992][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.319488][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.323029][ T13] bond0 (unregistering): Released all slaves [ 128.333981][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 128.401317][ T13] tipc: Disabling bearer [ 128.404609][ T13] tipc: Left network mode [ 128.440401][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.442684][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.445902][ T8463] bridge_slave_0: entered allmulticast mode [ 128.448633][ T8463] bridge_slave_0: entered promiscuous mode [ 128.466519][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.468836][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.471141][ T8463] bridge_slave_1: entered allmulticast mode [ 128.473780][ T8463] bridge_slave_1: entered promiscuous mode [ 128.509980][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.515300][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.575025][ T8463] team0: Port device team_slave_0 added [ 128.578477][ T8463] team0: Port device team_slave_1 added [ 128.639805][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.641997][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.649800][ T8463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.667152][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.669389][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.677639][ T8463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.686111][ T13] hsr_slave_0: left promiscuous mode [ 128.688227][ T13] hsr_slave_1: left promiscuous mode [ 128.690250][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.692554][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.696884][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.699270][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.718238][ T13] veth1_macvtap: left promiscuous mode [ 128.720063][ T13] veth0_macvtap: left promiscuous mode [ 128.721854][ T13] veth1_vlan: left promiscuous mode [ 128.723552][ T13] veth0_vlan: left promiscuous mode [ 129.294135][ T13] team0 (unregistering): Port device team_slave_1 removed [ 129.356510][ T13] team0 (unregistering): Port device team_slave_0 removed [ 129.864284][ T5290] Bluetooth: hci1: command tx timeout [ 129.867187][ T8463] hsr_slave_0: entered promiscuous mode [ 129.869873][ T8463] hsr_slave_1: entered promiscuous mode [ 129.871959][ T8463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.874591][ T8463] Cannot create hsr debugfs directory [ 130.440210][ T8463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.445567][ T8463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.449330][ T8463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.453194][ T8463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.494347][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.504801][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.509980][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.512325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.518032][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.520317][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.546204][ T8463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.621798][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.742207][ T8463] veth0_vlan: entered promiscuous mode [ 130.747117][ T8463] veth1_vlan: entered promiscuous mode [ 130.764930][ T8463] veth0_macvtap: entered promiscuous mode [ 130.769021][ T8463] veth1_macvtap: entered promiscuous mode [ 130.777992][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.783469][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.789407][ T8463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.792052][ T8463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.795693][ T8463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.798388][ T8463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.819815][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 130.850084][ T8564] bond6: entered promiscuous mode [ 130.852190][ T8564] 8021q: adding VLAN 0 to HW filter on device bond6 [ 130.862660][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.869081][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.939509][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.942136][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.277141][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.307240][ T8592] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.310746][ T8592] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.313122][ T8592] gretap1: entered promiscuous mode [ 132.314944][ T8592] gretap1: entered allmulticast mode [ 132.997998][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.778'. [ 133.001017][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 133.265556][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.552253][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.564078][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.567156][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.570597][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.573730][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.657228][ T8625] netlink: 80 bytes leftover after parsing attributes in process `syz.3.784'. [ 133.669245][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.672662][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.676681][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.682150][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.689826][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.696381][ T8629] chnl_net:caif_netlink_parms(): no params data found [ 133.848650][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.851243][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.853419][ T8629] bridge_slave_0: entered allmulticast mode [ 133.856607][ T8629] bridge_slave_0: entered promiscuous mode [ 133.862039][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.865306][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.868007][ T8629] bridge_slave_1: entered allmulticast mode [ 133.871647][ T8629] bridge_slave_1: entered promiscuous mode [ 133.920995][ T8629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.934432][ T8629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.992608][ T8629] team0: Port device team_slave_0 added [ 134.001127][ T8629] team0: Port device team_slave_1 added [ 134.078796][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.081061][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.090045][ T8629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.098537][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.101271][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.111517][ T8629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.145619][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 134.170078][ T8629] hsr_slave_0: entered promiscuous mode [ 134.172241][ T8629] hsr_slave_1: entered promiscuous mode [ 134.174435][ T8629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.176778][ T8629] Cannot create hsr debugfs directory [ 134.297333][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.300150][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.302937][ T8633] bridge_slave_0: entered allmulticast mode [ 134.306700][ T8633] bridge_slave_0: entered promiscuous mode [ 134.310817][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.313630][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.317748][ T8633] bridge_slave_1: entered allmulticast mode [ 134.321407][ T8633] bridge_slave_1: entered promiscuous mode [ 134.379649][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.401408][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.443403][ T8633] team0: Port device team_slave_0 added [ 134.448056][ T8633] team0: Port device team_slave_1 added [ 134.487615][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.490019][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.498623][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.503521][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.506263][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.515534][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.554230][ T8633] hsr_slave_0: entered promiscuous mode [ 134.556763][ T8633] hsr_slave_1: entered promiscuous mode [ 134.558788][ T8633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.561397][ T8633] Cannot create hsr debugfs directory [ 134.836433][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.894979][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.938581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d7a2c00: rx timeout, send abort [ 134.942492][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067d9c000: rx timeout, send abort [ 134.964627][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.124238][ T46] bridge_slave_1: left allmulticast mode [ 135.126018][ T46] bridge_slave_1: left promiscuous mode [ 135.127825][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.136425][ T46] bridge_slave_0: left allmulticast mode [ 135.138150][ T46] bridge_slave_0: left promiscuous mode [ 135.139921][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.380822][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.386936][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.391872][ T46] bond0 (unregistering): Released all slaves [ 135.444216][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d7a2c00: abort rx timeout. Force session deactivation [ 135.448577][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067d9c000: abort rx timeout. Force session deactivation [ 135.624188][ T5955] Bluetooth: hci1: command tx timeout [ 135.704283][ T5955] Bluetooth: hci3: command tx timeout [ 135.716557][ T46] hsr_slave_0: left promiscuous mode [ 135.718595][ T46] hsr_slave_1: left promiscuous mode [ 135.720524][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.722941][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.728110][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.730342][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.757443][ T46] veth1_macvtap: left promiscuous mode [ 135.759281][ T46] veth0_macvtap: left promiscuous mode [ 135.761012][ T46] veth1_vlan: left promiscuous mode [ 135.762705][ T46] veth0_vlan: left promiscuous mode [ 136.031874][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 136.458875][ T46] team0 (unregistering): Port device team_slave_1 removed [ 136.527877][ T46] team0 (unregistering): Port device team_slave_0 removed [ 137.078262][ T8633] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.174632][ T8633] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.323022][ T8633] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.389520][ T8633] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.406673][ T5290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.410715][ T5290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.414482][ T5290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.418690][ T5290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.422321][ T5290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.559841][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 137.624833][ T8633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.630313][ T8633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.652274][ T8633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.660475][ T8633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.704013][ T5290] Bluetooth: hci1: command tx timeout [ 137.731488][ T8629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.741896][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.744596][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.746823][ T8707] bridge_slave_0: entered allmulticast mode [ 137.749393][ T8707] bridge_slave_0: entered promiscuous mode [ 137.752312][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.755764][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.758195][ T8707] bridge_slave_1: entered allmulticast mode [ 137.760965][ T8707] bridge_slave_1: entered promiscuous mode [ 137.773324][ T8629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.778124][ T8629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.784234][ T5290] Bluetooth: hci3: command tx timeout [ 137.877977][ T46] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 137.976296][ T46] team0: Port device geneve0 removed [ 138.301483][ T46] bond0 (unregistering): Released all slaves [ 138.307943][ T46] bond1 (unregistering): Released all slaves [ 138.371069][ T46] bond2 (unregistering): Released all slaves [ 138.434627][ T46] bond3 (unregistering): (slave veth7): Releasing active interface [ 138.438270][ T46] bond3 (unregistering): Released all slaves [ 138.512956][ T46] bond4 (unregistering): (slave bond5): Releasing active interface [ 138.516842][ T46] bond4 (unregistering): Released all slaves [ 138.573132][ T46] bond5 (unregistering): Released all slaves [ 138.583730][ T46] bond6 (unregistering): Released all slaves [ 138.589448][ T8629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.597770][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.606025][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.673039][ T8707] team0: Port device team_slave_0 added [ 138.679512][ T8707] team0: Port device team_slave_1 added [ 138.712200][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.714438][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.721942][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.729362][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.731465][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.739623][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.785820][ T8707] hsr_slave_0: entered promiscuous mode [ 138.788008][ T8707] hsr_slave_1: entered promiscuous mode [ 138.790057][ T8707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.792522][ T8707] Cannot create hsr debugfs directory [ 138.888045][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.929717][ T8629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.937732][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.940968][ T8707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.945346][ T8707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.949117][ T8707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.956494][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.959762][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.962748][ T8707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.973286][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.975913][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.987708][ T8629] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.000844][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.003110][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.012834][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.015432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.092008][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.106457][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.112730][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.115265][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.139545][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.142547][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.170582][ T8707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.180912][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.214351][ T8629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.218228][ T8633] veth0_vlan: entered promiscuous mode [ 139.223583][ T8633] veth1_vlan: entered promiscuous mode [ 139.241075][ T8633] veth0_macvtap: entered promiscuous mode [ 139.247047][ T8633] veth1_macvtap: entered promiscuous mode [ 139.258275][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.266715][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.278626][ T8633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.281335][ T8633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.285019][ T8633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.287645][ T8633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.292730][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.329663][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.334039][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.359764][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.362250][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.382610][ T8629] veth0_vlan: entered promiscuous mode [ 139.390027][ T8629] veth1_vlan: entered promiscuous mode [ 139.405200][ T8629] veth0_macvtap: entered promiscuous mode [ 139.417191][ T8629] veth1_macvtap: entered promiscuous mode [ 139.458631][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.461806][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.464081][ T5290] Bluetooth: hci2: command tx timeout [ 139.467927][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.478357][ T8629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.481568][ T8629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.486102][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.490403][ T8707] veth0_vlan: entered promiscuous mode [ 139.493410][ T8629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.496203][ T8629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.498862][ T8629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.501537][ T8629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.509218][ T8707] veth1_vlan: entered promiscuous mode [ 139.540998][ T8747] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 139.541480][ T8707] veth0_macvtap: entered promiscuous mode [ 139.550446][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.553212][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.566025][ T8707] veth1_macvtap: entered promiscuous mode [ 139.572969][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.577401][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.584409][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.587302][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.590183][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.593084][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.597321][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.602824][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.606114][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.609094][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.612350][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.617767][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.623031][ T8707] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.626183][ T8707] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.629271][ T8707] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.632118][ T8707] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.684371][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.689289][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.702667][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.706588][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.869411][ T8759] netlink: 'syz.6.804': attribute type 1 has an invalid length. [ 139.931403][ T8760] ip6erspan0: entered promiscuous mode [ 140.147047][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 140.147060][ T40] audit: type=1804 audit(2000000041.369:40): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.806" name="/newroot/203/file0/file0" dev="ramfs" ino=28738 res=1 errno=0 [ 140.232693][ T46] tipc: Disabling bearer [ 140.239777][ T46] tipc: Left network mode [ 140.240607][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 140.518644][ T46] hsr_slave_0: left promiscuous mode [ 140.520924][ T46] hsr_slave_1: left promiscuous mode [ 140.556521][ T46] veth1_macvtap: left promiscuous mode [ 140.558950][ T46] veth0_macvtap: left promiscuous mode [ 140.561388][ T46] veth1_vlan: left promiscuous mode [ 140.563687][ T46] veth0_vlan: left promiscuous mode [ 140.846868][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.857104][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.868354][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.874604][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.877310][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.465499][ T8774] net_ratelimit: 352 callbacks suppressed [ 141.465511][ T8774] Set syz1 is full, maxelem 65536 reached [ 141.546934][ T5290] Bluetooth: hci2: command tx timeout [ 142.200065][ T8779] chnl_net:caif_netlink_parms(): no params data found [ 142.288675][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.293350][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.300759][ T8779] bridge_slave_0: entered allmulticast mode [ 142.306643][ T8779] bridge_slave_0: entered promiscuous mode [ 142.313467][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.321272][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.327254][ T8779] bridge_slave_1: entered allmulticast mode [ 142.332690][ T8779] bridge_slave_1: entered promiscuous mode [ 142.391602][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.399531][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.465173][ T8779] team0: Port device team_slave_0 added [ 142.480770][ T8779] team0: Port device team_slave_1 added [ 142.558445][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.560639][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.584351][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.604218][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.606926][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.623758][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.650428][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.6.818'. [ 142.738284][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.749512][ T8779] hsr_slave_0: entered promiscuous mode [ 142.752025][ T8779] hsr_slave_1: entered promiscuous mode [ 142.754577][ T8779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.757105][ T8779] Cannot create hsr debugfs directory [ 142.764821][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.768873][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.777917][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.784590][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.787274][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.905347][ T5955] Bluetooth: hci1: command tx timeout [ 142.991653][ T8779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.066674][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 143.624045][ T5955] Bluetooth: hci2: command tx timeout [ 143.842740][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.951343][ T8779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.966519][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.970195][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.973807][ T8825] bridge_slave_0: entered allmulticast mode [ 143.976723][ T8825] bridge_slave_0: entered promiscuous mode [ 143.980285][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.982576][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.984816][ T8825] bridge_slave_1: entered allmulticast mode [ 143.987408][ T8825] bridge_slave_1: entered promiscuous mode [ 144.041201][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.058743][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.074191][ T8779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.084876][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.136698][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.144659][ T8825] team0: Port device team_slave_0 added [ 144.147975][ T8825] team0: Port device team_slave_1 added [ 144.177150][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.179406][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.189205][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.206736][ T8779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.212781][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.215115][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.228564][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.296961][ T8825] hsr_slave_0: entered promiscuous mode [ 144.300148][ T8825] hsr_slave_1: entered promiscuous mode [ 144.303058][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.306161][ T8825] Cannot create hsr debugfs directory [ 144.392324][ T46] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.466089][ T8779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.471825][ T8779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.480896][ T46] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.508894][ T8779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.515045][ T8779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.559884][ T46] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.595618][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.613426][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.620499][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.622601][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.649957][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.652312][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.706303][ T46] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.741354][ T8855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 144.780925][ T8779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.824073][ T5955] Bluetooth: hci3: command tx timeout [ 144.830835][ T8779] veth0_vlan: entered promiscuous mode [ 144.890510][ T46] bridge_slave_1: left allmulticast mode [ 144.892287][ T46] bridge_slave_1: left promiscuous mode [ 144.894586][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.900368][ T46] bridge_slave_0: left allmulticast mode [ 144.902760][ T46] bridge_slave_0: left promiscuous mode [ 144.905895][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.919584][ T46] bridge_slave_1: left allmulticast mode [ 144.921968][ T46] bridge_slave_1: left promiscuous mode [ 144.925271][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.930494][ T46] bridge_slave_0: left allmulticast mode [ 144.932895][ T46] bridge_slave_0: left promiscuous mode [ 144.939585][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.953960][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 144.966387][ T40] audit: type=1326 audit(2000000046.189:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.3.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7fc00000 [ 144.993983][ T5955] Bluetooth: hci1: command tx timeout [ 145.043949][ T46] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 145.104049][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 145.116028][ T24] usb 11-1: unable to get BOS descriptor or descriptor too short [ 145.119272][ T24] usb 11-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 145.122973][ T24] usb 11-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 145.127038][ T24] usb 11-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.131132][ T24] usb 11-1: config 1 interface 0 has no altsetting 0 [ 145.137639][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.140479][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.143112][ T24] usb 11-1: Product: syz [ 145.146657][ T24] usb 11-1: Manufacturer: syz [ 145.148465][ T24] usb 11-1: SerialNumber: syz [ 145.152070][ T8861] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 145.155222][ T8861] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 145.559486][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.564663][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.569782][ T46] bond0 (unregistering): Released all slaves [ 145.638738][ T46] bond0 (unregistering): Released all slaves [ 145.642373][ T40] audit: type=1326 audit(2000000046.859:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.3.830" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7579 code=0x7fc00000 [ 145.654127][ T40] audit: type=1326 audit(2000000046.859:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.3.830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7fc00000 [ 145.717798][ T5955] Bluetooth: hci2: command tx timeout [ 145.731464][ T46] bond1 (unregistering): (slave veth3): Releasing active interface [ 145.735150][ T46] bond1 (unregistering): Released all slaves [ 145.807701][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.818341][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.822325][ T46] bond0 (unregistering): Released all slaves [ 145.829921][ T8779] veth1_vlan: entered promiscuous mode [ 145.864494][ T24] usb 11-1: bad CDC descriptors [ 145.883187][ T8779] veth0_macvtap: entered promiscuous mode [ 145.888119][ T24] usb 11-1: USB disconnect, device number 2 [ 145.896380][ T8779] veth1_macvtap: entered promiscuous mode [ 145.914161][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.921294][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.924863][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.928630][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.932475][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.936178][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.945853][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.953450][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.962672][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.967529][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.971404][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.974597][ T8779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.977914][ T8779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.982170][ T8779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.988295][ T8779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.991079][ T8779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.994654][ T8779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.998283][ T8779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.092341][ T8825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.099404][ T8825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.108794][ T8825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.120543][ T8825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.141748][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.149046][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.197322][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.199724][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.252378][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.285667][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.342381][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.344791][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.352142][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.354453][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.532302][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.806573][ T8825] veth0_vlan: entered promiscuous mode [ 146.829305][ T8825] veth1_vlan: entered promiscuous mode [ 146.866491][ T46] hsr_slave_0: left promiscuous mode [ 146.870308][ T46] hsr_slave_1: left promiscuous mode [ 146.872192][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.875827][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.878779][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.881142][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.888767][ T46] hsr_slave_0: left promiscuous mode [ 146.891659][ T46] hsr_slave_1: left promiscuous mode [ 146.902333][ T46] hsr_slave_0: left promiscuous mode [ 146.912036][ T46] hsr_slave_1: left promiscuous mode [ 146.914045][ T5955] Bluetooth: hci3: command tx timeout [ 146.918609][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.921749][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.928004][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.930840][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.038970][ T46] veth1_macvtap: left promiscuous mode [ 147.040837][ T46] veth0_macvtap: left promiscuous mode [ 147.044242][ T46] veth1_vlan: left promiscuous mode [ 147.046195][ T46] veth0_vlan: left promiscuous mode [ 147.054204][ T46] veth1_macvtap: left promiscuous mode [ 147.056173][ T46] veth0_macvtap: left promiscuous mode [ 147.060247][ T46] veth1_vlan: left promiscuous mode [ 147.062689][ T46] veth0_vlan: left promiscuous mode [ 147.077127][ T46] veth1_macvtap: left promiscuous mode [ 147.078956][ T46] veth0_macvtap: left promiscuous mode [ 147.081103][ T46] veth1_vlan: left promiscuous mode [ 147.084158][ T46] veth0_vlan: left promiscuous mode [ 147.791465][ T5290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.796329][ T5290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.803113][ T5290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.816529][ T5290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.824183][ T5290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.953846][ T46] team0 (unregistering): Port device team_slave_1 removed [ 148.020119][ T46] team0 (unregistering): Port device team_slave_0 removed [ 148.791074][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.839'. [ 148.846830][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.839'. [ 148.984002][ T5955] Bluetooth: hci3: command tx timeout [ 149.877305][ T5955] Bluetooth: hci1: command tx timeout [ 150.170715][ T46] team0 (unregistering): Port device team_slave_1 removed [ 150.231974][ T46] team0 (unregistering): Port device team_slave_0 removed [ 150.678657][ T8950] warning: `syz.3.838' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.763034][ T8825] veth0_macvtap: entered promiscuous mode [ 150.778888][ T8825] veth1_macvtap: entered promiscuous mode [ 150.837679][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.841945][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.848641][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.853756][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.865203][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.917374][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.921549][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.927237][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.931039][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.937114][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.959657][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 150.975132][ T8825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.979038][ T8825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.982708][ T8825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.989936][ T8825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.080857][ T5955] Bluetooth: hci3: command tx timeout [ 151.150278][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.153293][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.156456][ T8953] bridge_slave_0: entered allmulticast mode [ 151.160244][ T8953] bridge_slave_0: entered promiscuous mode [ 151.190692][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.193828][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.205035][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.208954][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.219722][ T8953] bridge_slave_1: entered allmulticast mode [ 151.225904][ T8953] bridge_slave_1: entered promiscuous mode [ 151.292736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.297692][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.301543][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.305547][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.376489][ T8953] team0: Port device team_slave_0 added [ 151.395756][ T8953] team0: Port device team_slave_1 added [ 151.421449][ T8981] syzkaller0: entered promiscuous mode [ 151.423302][ T8981] syzkaller0: entered allmulticast mode [ 151.483465][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.485984][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.495104][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.750207][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'. [ 151.757056][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'. [ 151.761649][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'. [ 151.944121][ T5955] Bluetooth: hci1: command tx timeout [ 151.977189][ T8986] 9p: Unknown uid 00000000004294967295 [ 152.508219][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.510459][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.520249][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.647074][ T8953] hsr_slave_0: entered promiscuous mode [ 152.649067][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 152.650156][ T8953] hsr_slave_1: entered promiscuous mode [ 152.655952][ T5290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.658906][ T5290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.661661][ T5290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.663809][ T8953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.666096][ T5290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.670014][ T5290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.672533][ T8953] Cannot create hsr debugfs directory [ 152.700698][ T8994] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.771278][ T8994] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.901672][ T8994] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.929446][ T8953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.994953][ T8994] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.022111][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 153.052467][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'. [ 153.067215][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'. [ 153.071401][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.849'. [ 153.097105][ T8953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.185293][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.187576][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.189799][ T8995] bridge_slave_0: entered allmulticast mode [ 153.192337][ T8995] bridge_slave_0: entered promiscuous mode [ 153.195676][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.197949][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.200177][ T8995] bridge_slave_1: entered allmulticast mode [ 153.202731][ T8995] bridge_slave_1: entered promiscuous mode [ 153.230601][ T8953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.254873][ T8994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.322751][ T77] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.341204][ T8953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.350668][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.357470][ T8994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.362352][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.371201][ T8994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.395844][ T8994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.437592][ T8995] team0: Port device team_slave_0 added [ 153.445629][ T8995] team0: Port device team_slave_1 added [ 153.478692][ T77] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.627474][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.629670][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.671377][ T8995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.705137][ T77] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.721469][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.724703][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.736230][ T8995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.837861][ T77] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.850799][ T9037] bridge_slave_0: left allmulticast mode [ 153.852692][ T9037] bridge_slave_0: left promiscuous mode [ 153.855671][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.860055][ T9037] bridge_slave_1: left allmulticast mode [ 153.861843][ T9037] bridge_slave_1: left promiscuous mode [ 153.864523][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.870496][ T9037] bond0: (slave bond_slave_0): Releasing backup interface [ 153.879161][ T9037] bond0: (slave bond_slave_1): Releasing backup interface [ 153.900248][ T9037] team0: Port device team_slave_0 removed [ 153.917282][ T9037] team0: Port device team_slave_1 removed [ 153.919658][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.921991][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.927293][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.929747][ T9037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.939386][ T8995] hsr_slave_0: entered promiscuous mode [ 153.942640][ T8995] hsr_slave_1: entered promiscuous mode [ 153.946136][ T8995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.948526][ T8995] Cannot create hsr debugfs directory [ 153.964316][ T9039] team0: Mode changed to "broadcast" [ 153.979427][ T9037] tipc: Started in network mode [ 153.981010][ T9037] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 153.983401][ T9037] tipc: Enabled bearer , priority 0 [ 153.986246][ T9040] vlan0: entered promiscuous mode [ 153.993337][ T9040] team0: Port device vlan0 added [ 154.024537][ T5955] Bluetooth: hci1: command tx timeout [ 154.068921][ T8953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.097119][ T9046] netlink: 'syz.3.858': attribute type 10 has an invalid length. [ 154.100366][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.858'. [ 154.110936][ T8953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.123240][ T9046] batadv0: entered promiscuous mode [ 154.125448][ T9046] batadv0: entered allmulticast mode [ 154.128201][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.131078][ T9046] bridge0: port 1(batadv0) entered blocking state [ 154.133318][ T9046] bridge0: port 1(batadv0) entered disabled state [ 154.138081][ T9046] bridge0: port 1(batadv0) entered blocking state [ 154.140223][ T9046] bridge0: port 1(batadv0) entered forwarding state [ 154.165845][ T8953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.170640][ T8953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.175104][ T9046] batman_adv: batadv0: Adding interface: dummy0 [ 154.176994][ T9046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.187404][ T9046] batman_adv: batadv0: Interface activated: dummy0 [ 154.236005][ T9046] batadv0: mtu less than device minimum [ 154.238347][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.242105][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.245766][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.250269][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.253923][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.257590][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.261238][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.264986][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.268818][ T9046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 154.348299][ T77] bridge_slave_1: left allmulticast mode [ 154.350673][ T77] bridge_slave_1: left promiscuous mode [ 154.353416][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.362918][ T77] bridge_slave_0: left allmulticast mode [ 154.366781][ T77] bridge_slave_0: left promiscuous mode [ 154.368640][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.373807][ T77] bridge_slave_1: left allmulticast mode [ 154.376946][ T77] bridge_slave_1: left promiscuous mode [ 154.378852][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.382342][ T77] bridge_slave_0: left allmulticast mode [ 154.385877][ T77] bridge_slave_0: left promiscuous mode [ 154.387699][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.585172][ T1138] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 154.590900][ T1138] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 154.744420][ T5290] Bluetooth: hci3: command tx timeout [ 154.863085][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.868305][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.872013][ T77] bond0 (unregistering): Released all slaves [ 154.942183][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.947122][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.950712][ T77] bond0 (unregistering): Released all slaves [ 154.988264][ T10] tipc: Node number set to 11578026 [ 155.032091][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.067214][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.110735][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.113507][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.145727][ T9076] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.865'. [ 155.148943][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'. [ 155.150254][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.154165][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.235565][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 155.243965][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 155.246744][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 155.322116][ T8995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.339295][ T8995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.370742][ T8995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.385919][ T8995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.408797][ T8953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.519051][ T8953] veth0_vlan: entered promiscuous mode [ 155.542766][ T8953] veth1_vlan: entered promiscuous mode [ 155.563183][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.572895][ T77] hsr_slave_0: left promiscuous mode [ 155.576976][ T77] hsr_slave_1: left promiscuous mode [ 155.579103][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.581522][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.584479][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.586942][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.592950][ T77] hsr_slave_0: left promiscuous mode [ 155.598262][ T77] hsr_slave_1: left promiscuous mode [ 155.600399][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.602824][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.617309][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.619697][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.663423][ T77] veth1_macvtap: left promiscuous mode [ 155.665437][ T77] veth0_macvtap: left promiscuous mode [ 155.667405][ T77] veth1_vlan: left promiscuous mode [ 155.669179][ T77] veth0_vlan: left promiscuous mode [ 155.671748][ T77] veth1_macvtap: left promiscuous mode [ 155.673560][ T77] veth0_macvtap: left promiscuous mode [ 155.675665][ T77] veth1_vlan: left promiscuous mode [ 155.677594][ T77] veth0_vlan: left promiscuous mode [ 156.004567][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz.6.869'. [ 156.007448][ T9160] netlink: 'syz.6.869': attribute type 7 has an invalid length. [ 156.009895][ T9160] netlink: 'syz.6.869': attribute type 8 has an invalid length. [ 156.012275][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.869'. [ 156.103972][ T5290] Bluetooth: hci1: command tx timeout [ 156.432261][ T77] team0 (unregistering): Port device team_slave_1 removed [ 156.517919][ T77] team0 (unregistering): Port device team_slave_0 removed [ 156.824081][ T5290] Bluetooth: hci3: command tx timeout [ 157.551221][ T77] team0 (unregistering): Port device team_slave_1 removed [ 157.625831][ T77] team0 (unregistering): Port device team_slave_0 removed [ 158.095353][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.103730][ T9160] bond0: entered promiscuous mode [ 158.106762][ T9160] ip6gretap0: entered promiscuous mode [ 158.110056][ T9160] gretap0: entered promiscuous mode [ 158.113017][ T9160] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 158.119010][ T9172] veth1_macvtap: left promiscuous mode [ 158.121423][ T9172] macsec0: entered promiscuous mode [ 158.135112][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.137447][ T9157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.149298][ T8953] veth0_macvtap: entered promiscuous mode [ 158.153042][ T8953] veth1_macvtap: entered promiscuous mode [ 158.161515][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.163677][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.196204][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.196855][ T9180] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.200460][ T8953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.201557][ T9180] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 158.235075][ T8995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.238744][ T8995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.252483][ T8953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.258484][ T8953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.261975][ T8953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.265425][ T8953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.318633][ T9153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.321299][ T9153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.343387][ T9153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.354116][ T9153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.394272][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.528270][ T9198] wireguard0: entered promiscuous mode [ 158.568804][ T8995] veth0_vlan: entered promiscuous mode [ 158.582310][ T8995] veth1_vlan: entered promiscuous mode [ 158.611583][ T8995] veth0_macvtap: entered promiscuous mode [ 158.617485][ T8995] veth1_macvtap: entered promiscuous mode [ 158.626566][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.629776][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.633483][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.639946][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.643157][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.646981][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.651805][ T8995] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.655482][ T8995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.658262][ T8995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.661018][ T8995] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.705569][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.708366][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.714472][ T9110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.717647][ T9110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.202469][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 159.271837][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.514035][ T6001] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 159.696077][ T6001] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.700320][ T6001] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.705039][ T6001] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.710787][ T6001] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 159.710811][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.713589][ T6001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 159.718409][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.718894][ T6001] usb 8-1: SerialNumber: syz [ 159.721660][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.725651][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.728413][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.729630][ T6001] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 159.733323][ T6001] usb-storage 8-1:1.0: USB Mass Storage device detected [ 159.741351][ T6001] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 159.835051][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.847368][ T9217] chnl_net:caif_netlink_parms(): no params data found [ 159.937052][ T6001] usb 8-1: USB disconnect, device number 7 [ 159.956679][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.959113][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.962016][ T9217] bridge_slave_0: entered allmulticast mode [ 159.974134][ T9217] bridge_slave_0: entered promiscuous mode [ 159.991336][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.998381][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.000526][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.002678][ T9217] bridge_slave_1: entered allmulticast mode [ 160.005579][ T9217] bridge_slave_1: entered promiscuous mode [ 160.044477][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.050015][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.075583][ T9230] netlink: 40 bytes leftover after parsing attributes in process `syz.6.880'. [ 160.105884][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.115826][ T9230] netlink: 40 bytes leftover after parsing attributes in process `syz.6.880'. [ 160.119241][ T9217] team0: Port device team_slave_0 added [ 160.122820][ T9217] team0: Port device team_slave_1 added [ 160.173435][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.178308][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.178633][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.186347][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.190567][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.195742][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.198877][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.201836][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.207554][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.209922][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.219489][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.351292][ T9217] hsr_slave_0: entered promiscuous mode [ 160.353521][ T9217] hsr_slave_1: entered promiscuous mode [ 160.378955][ T9217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.381319][ T9217] Cannot create hsr debugfs directory [ 160.574400][ T1142] bridge_slave_1: left allmulticast mode [ 160.576280][ T1142] bridge_slave_1: left promiscuous mode [ 160.579318][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.583238][ T1142] bridge_slave_0: left allmulticast mode [ 160.585845][ T1142] bridge_slave_0: left promiscuous mode [ 160.587789][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.873641][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.880684][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.886116][ T1142] bond0 (unregistering): Released all slaves [ 161.036122][ T9234] chnl_net:caif_netlink_parms(): no params data found [ 161.117045][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.119592][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.121850][ T9234] bridge_slave_0: entered allmulticast mode [ 161.124617][ T9234] bridge_slave_0: entered promiscuous mode [ 161.130898][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.133315][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.136708][ T9234] bridge_slave_1: entered allmulticast mode [ 161.139344][ T9234] bridge_slave_1: entered promiscuous mode [ 161.186321][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.190762][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.275258][ T9234] team0: Port device team_slave_0 added [ 161.288841][ T9234] team0: Port device team_slave_1 added [ 161.326606][ T1142] hsr_slave_0: left promiscuous mode [ 161.329636][ T1142] hsr_slave_1: left promiscuous mode [ 161.332405][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.337514][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.342181][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.346990][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.380101][ T1142] veth1_macvtap: left promiscuous mode [ 161.381954][ T1142] veth0_macvtap: left promiscuous mode [ 161.383809][ T1142] veth1_vlan: left promiscuous mode [ 161.386099][ T1142] veth0_vlan: left promiscuous mode [ 161.786624][ T5955] Bluetooth: hci1: command tx timeout [ 161.950694][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 162.017495][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 162.277441][ T5955] Bluetooth: hci3: command tx timeout [ 162.568391][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.570900][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.580496][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.593905][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.596061][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.607425][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.656552][ T9234] hsr_slave_0: entered promiscuous mode [ 162.659643][ T9234] hsr_slave_1: entered promiscuous mode [ 162.661699][ T9234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.683610][ T9234] Cannot create hsr debugfs directory [ 162.778054][ T9217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.785576][ T9217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.807133][ T9217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.811453][ T9217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.858958][ T9234] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.864159][ T7021] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 162.906609][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.919437][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.926081][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.928438][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.934117][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.936320][ T9153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.967637][ T9234] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.023989][ T7021] usb 8-1: Using ep0 maxpacket: 8 [ 163.028116][ T7021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.032848][ T7021] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.036902][ T7021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.044821][ T7021] usb 8-1: config 0 descriptor?? [ 163.057011][ T9234] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.083003][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.107883][ T9217] veth0_vlan: entered promiscuous mode [ 163.112422][ T9217] veth1_vlan: entered promiscuous mode [ 163.141789][ T9234] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.150916][ T9217] veth0_macvtap: entered promiscuous mode [ 163.156708][ T9217] veth1_macvtap: entered promiscuous mode [ 163.164376][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.167655][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.171589][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.178531][ T9217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.181785][ T9217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.186378][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.190773][ T9217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.193612][ T9217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.196832][ T9217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.199547][ T9217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.246912][ T1142] bridge_slave_1: left allmulticast mode [ 163.248846][ T1142] bridge_slave_1: left promiscuous mode [ 163.250712][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.254856][ T1142] bridge_slave_0: left allmulticast mode [ 163.256621][ T1142] bridge_slave_0: left promiscuous mode [ 163.258628][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.393306][ T7021] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.401392][ T7021] usb 8-1: USB disconnect, device number 8 [ 163.508010][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.513555][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.518663][ T1142] bond0 (unregistering): Released all slaves [ 163.542547][ T9157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.551380][ T9157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.581664][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.582771][ T9234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.584724][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.593583][ T9234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.607482][ T9234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.616166][ T9234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.709820][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.718222][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.722927][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.725206][ T9110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.749885][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.752138][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.890125][ T1142] hsr_slave_0: left promiscuous mode [ 163.893041][ T1142] hsr_slave_1: left promiscuous mode [ 163.902962][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.906662][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.909430][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.911725][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.931123][ T1142] veth1_macvtap: left promiscuous mode [ 163.932924][ T1142] veth0_macvtap: left promiscuous mode [ 163.935232][ T1142] veth1_vlan: left promiscuous mode [ 163.936933][ T1142] veth0_vlan: left promiscuous mode [ 163.956874][ T9304] cgroup: Unknown subsys name 'noxattr' [ 164.016713][ T9306] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.891'. [ 164.020517][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'. [ 164.115497][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.6.893'. [ 164.345292][ T5955] Bluetooth: hci3: command tx timeout [ 164.590370][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 164.667906][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 165.331288][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.479925][ T9234] veth0_vlan: entered promiscuous mode [ 165.490622][ T9234] veth1_vlan: entered promiscuous mode [ 165.516118][ T9234] veth0_macvtap: entered promiscuous mode [ 165.520576][ T9234] veth1_macvtap: entered promiscuous mode [ 165.542076][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.547781][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.551607][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.559043][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.562412][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.567178][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.570964][ T9234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.574893][ T9234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.578189][ T9234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.581274][ T9234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.610822][ T9110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.615048][ T9110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.628129][ T9110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.631420][ T9110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.738370][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.439920][ T5290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.444621][ T5290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.447401][ T5290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.450161][ T5290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.453571][ T5290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.582358][ T9348] chnl_net:caif_netlink_parms(): no params data found [ 166.731052][ T9348] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.733279][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.737157][ T9348] bridge_slave_0: entered allmulticast mode [ 166.739805][ T9348] bridge_slave_0: entered promiscuous mode [ 166.742850][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.745428][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.747918][ T9348] bridge_slave_1: entered allmulticast mode [ 166.750575][ T9348] bridge_slave_1: entered promiscuous mode [ 166.805761][ T9348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.810440][ T9348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.850331][ T9348] team0: Port device team_slave_0 added [ 166.855240][ T9348] team0: Port device team_slave_1 added [ 166.866470][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.905155][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.907493][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.915993][ T9348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.921044][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.923332][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.931858][ T9348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.997959][ T9348] hsr_slave_0: entered promiscuous mode [ 167.001080][ T9348] hsr_slave_1: entered promiscuous mode [ 167.005167][ T9348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.008349][ T9348] Cannot create hsr debugfs directory [ 167.178565][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.271553][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.280254][ T9363] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 167.317552][ T9366] input: syz0 as /devices/virtual/input/input5 [ 167.409071][ T5290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.414918][ T5290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.419177][ T5290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.423304][ T5290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.428907][ T5290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.457608][ T1142] bridge_slave_1: left allmulticast mode [ 167.459997][ T1142] bridge_slave_1: left promiscuous mode [ 167.462813][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.472524][ T1142] bridge_slave_0: left allmulticast mode [ 167.475234][ T1142] bridge_slave_0: left promiscuous mode [ 167.494746][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.802503][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.810815][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.815584][ T1142] bond0 (unregistering): Released all slaves [ 167.925300][ T9366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.929470][ T9366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.931405][ T9366] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.942736][ T9366] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.952700][ T9366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.954932][ T9366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.981032][ T9366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.984875][ T9366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.986807][ T9366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.991323][ T9366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 168.059506][ T9385] netlink: 'syz.6.909': attribute type 13 has an invalid length. [ 168.225821][ T9385] tipc: Resetting bearer [ 168.370281][ T9385] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.373794][ T9385] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.384406][ T9385] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.387853][ T9385] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.527876][ T9369] chnl_net:caif_netlink_parms(): no params data found [ 168.672926][ T1142] hsr_slave_0: left promiscuous mode [ 168.690990][ T1142] hsr_slave_1: left promiscuous mode [ 168.693820][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.710404][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.713808][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.943503][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.033596][ T1142] veth1_macvtap: left promiscuous mode [ 169.040548][ T1142] veth0_macvtap: left promiscuous mode [ 169.048075][ T1142] veth1_vlan: left promiscuous mode [ 169.049755][ T1142] veth0_vlan: left promiscuous mode [ 169.532824][ T40] audit: type=1107 audit(2000000070.749:44): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g'jNJ0 pyEG) [ 169.532824][ T40] q¾BӜφҭ$2(P.)s|Bh==\t˱d}9psp68|n85_#Vy׋ZU:@2rЍ TgXQ,64)3&T $ƒl=gTƌL1%llTH$hѲv2 y&>_ĦZ:ʽMl~#ɺFN=I䶈}Xm"qR(5/a=]89֤' [ 169.549462][ T9405] netlink: 'syz.3.912': attribute type 4 has an invalid length. [ 169.809712][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 169.900527][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 169.947383][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.947415][ T5290] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.025151][ T5290] Bluetooth: hci3: command 0x041b tx timeout [ 170.025167][ T5955] Bluetooth: hci1: command 0x041b tx timeout [ 170.562513][ T9419] evm: overlay not supported [ 170.563436][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.573985][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.576518][ T9369] bridge_slave_0: entered allmulticast mode [ 170.601285][ T9369] bridge_slave_0: entered promiscuous mode [ 170.607805][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.610414][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.613068][ T9369] bridge_slave_1: entered allmulticast mode [ 170.615848][ T9369] bridge_slave_1: entered promiscuous mode [ 170.675021][ T9369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.678432][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.916'. [ 170.693334][ T9348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.703774][ T9369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.749359][ T9348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.761542][ T9369] team0: Port device team_slave_0 added [ 170.767475][ T9348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.776523][ T9369] team0: Port device team_slave_1 added [ 170.778985][ T9348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.828970][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.831298][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.839507][ T9369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.845654][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.847862][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.858307][ T9369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.918552][ T9369] hsr_slave_0: entered promiscuous mode [ 170.920854][ T9369] hsr_slave_1: entered promiscuous mode [ 170.923040][ T9369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.925555][ T9369] Cannot create hsr debugfs directory [ 171.030156][ T1142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.115350][ T1142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.142929][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.164929][ T9348] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.169874][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.172211][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.192469][ T1142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.199057][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.201325][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.220145][ T9348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.223354][ T9348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.272735][ T1142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.319326][ T9348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.343253][ T9348] veth0_vlan: entered promiscuous mode [ 171.351613][ T9348] veth1_vlan: entered promiscuous mode [ 171.401495][ T9348] veth0_macvtap: entered promiscuous mode [ 171.429329][ T9348] veth1_macvtap: entered promiscuous mode [ 171.449900][ T1142] bridge_slave_1: left allmulticast mode [ 171.452029][ T1142] bridge_slave_1: left promiscuous mode [ 171.454314][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.457814][ T1142] bridge_slave_0: left allmulticast mode [ 171.459750][ T1142] bridge_slave_0: left promiscuous mode [ 171.462373][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.680305][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 171.683213][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 171.769363][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.774782][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.778462][ T1142] bond0 (unregistering): Released all slaves [ 171.811916][ T9470] ceph: No mds server is up or the cluster is laggy [ 171.831690][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.835642][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.844519][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.870936][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.877250][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.885174][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.886050][ T9483] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 171.910557][ T9348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.914906][ T9348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.917969][ T9348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.921059][ T9348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.974217][ T9483] bond4: (slave gretap1): making interface the new active one [ 171.977609][ T9483] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 171.993206][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 171.998139][ T9483] bond4 (unregistering): (slave gretap1): Releasing active interface [ 172.003390][ T9483] bond4 (unregistering): Released all slaves [ 172.022019][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.024972][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.034041][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.043822][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.049155][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.104097][ T5955] Bluetooth: hci1: command 0x041b tx timeout [ 172.104344][ T5290] Bluetooth: hci3: command 0x041b tx timeout [ 172.227775][ T1142] hsr_slave_0: left promiscuous mode [ 172.243024][ T1142] hsr_slave_1: left promiscuous mode [ 172.245188][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.247518][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.253492][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.255992][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.286436][ T1142] veth1_macvtap: left promiscuous mode [ 172.289138][ T1142] veth0_macvtap: left promiscuous mode [ 172.291557][ T1142] veth1_vlan: left promiscuous mode [ 172.293220][ T1142] veth0_vlan: left promiscuous mode [ 172.970381][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 173.056567][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 173.772280][ T9369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.781163][ T9369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.788579][ T9369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.794176][ T9369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.848087][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.859620][ T9369] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.866464][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.869200][ T9132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.877798][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.880042][ T9132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.002508][ T9369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.114630][ T5290] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.135118][ T9369] veth0_vlan: entered promiscuous mode [ 174.164708][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.172635][ T9369] veth1_vlan: entered promiscuous mode [ 174.187100][ T9369] veth0_macvtap: entered promiscuous mode [ 174.190989][ T9369] veth1_macvtap: entered promiscuous mode [ 174.194984][ T5290] Bluetooth: hci3: command 0x041b tx timeout [ 174.198796][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.202024][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.206449][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.211723][ T9369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.215457][ T9369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.219254][ T9369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.223624][ T9369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.227514][ T9369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.230327][ T9369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.233053][ T9369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.267587][ T9153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.270059][ T9153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.283985][ T9132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.286917][ T9132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.002934][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.007964][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.011961][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.015027][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.018641][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.221037][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.232087][ T9553] chnl_net:caif_netlink_parms(): no params data found [ 175.337800][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.340044][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.342214][ T9553] bridge_slave_0: entered allmulticast mode [ 175.346957][ T9553] bridge_slave_0: entered promiscuous mode [ 175.351246][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.353696][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.356262][ T9553] bridge_slave_1: entered allmulticast mode [ 175.360001][ T9553] bridge_slave_1: entered promiscuous mode [ 175.428466][ T9553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.436237][ T9553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.490430][ T9553] team0: Port device team_slave_0 added [ 175.498464][ T9553] team0: Port device team_slave_1 added [ 175.530006][ T9553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.531999][ T9553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.539896][ T9553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.544216][ T9553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.546359][ T9553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.555428][ T9553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.597279][ T9553] hsr_slave_0: entered promiscuous mode [ 175.599469][ T9553] hsr_slave_1: entered promiscuous mode [ 175.601510][ T9553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.603837][ T9553] Cannot create hsr debugfs directory [ 175.705820][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.808747][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.905141][ T9575] netlink: 32 bytes leftover after parsing attributes in process `syz.6.935'. [ 175.964738][ T1142] bridge_slave_1: left allmulticast mode [ 175.966572][ T1142] bridge_slave_1: left promiscuous mode [ 175.968430][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.978782][ T1142] bridge_slave_0: left allmulticast mode [ 175.980632][ T1142] bridge_slave_0: left promiscuous mode [ 175.982752][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.179515][ T9582] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 176.183939][ T9582] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 176.188686][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: syz.6.937 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 176.193958][ T9582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.198250][ T9582] RIP: 0010:find_match+0x136/0x15d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.200359][ T9582] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 44 10 50 01 [ 176.207964][ T9582] RSP: 0018:ffffc9000363eb90 EFLAGS: 00010206 [ 176.209852][ T9582] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffc9002a239000 [ 176.212281][ T9582] RDX: 0000000000000018 RSI: ffffffff8a18a5cf RDI: 00000000000000c0 [ 176.214790][ T9582] RBP: ffffc9000363ec98 R08: 0000000000000001 R09: 0000000000000000 [ 176.217219][ T9582] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880437f9e37 [ 176.219591][ T9582] R13: ffff8880437f9e20 R14: 1ffff920006c7d81 R15: 0000000000000000 [ 176.222020][ T9582] FS: 0000000000000000(0000) GS:ffff8880977ef000(0063) knlGS:00000000f4ffcb40 [ 176.224767][ T9582] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 176.226800][ T9582] CR2: 000000002c413ffc CR3: 0000000024236000 CR4: 0000000000352ef0 [ 176.229253][ T9582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.231692][ T9582] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.234223][ T9582] Call Trace: [ 176.235314][ T9582] [ 176.236256][ T9582] ? __update_page_owner_handle+0x37c/0x530 [ 176.238282][ T9582] ? __pfx_find_match+0x10/0x10 [ 176.239931][ T9582] ? __page_table_check_zero+0x323/0x5b0 [ 176.241713][ T9582] rt6_nh_find_match+0xfa/0x1a0 [ 176.243200][ T9582] nexthop_for_each_fib6_nh+0x165/0x4a0 [ 176.244939][ T9582] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 176.246657][ T9582] __find_rr_leaf+0x6e5/0xe00 [ 176.248162][ T9582] ? __pfx___find_rr_leaf+0x10/0x10 [ 176.249893][ T9582] ? fib6_node_lookup+0x12d/0x190 [ 176.251502][ T9582] ? __pfx_fib6_node_lookup+0x10/0x10 [ 176.253234][ T9582] fib6_table_lookup+0x57c/0xa30 [ 176.254941][ T9582] ? __pfx_fib6_table_lookup+0x10/0x10 [ 176.256640][ T9582] ip6_pol_route+0x1cc/0x1230 [ 176.258147][ T9582] ? __pfx_ip6_pol_route+0x10/0x10 [ 176.259742][ T9582] ? __lock_acquire+0x5ca/0x1ba0 [ 176.261303][ T9582] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 176.263071][ T9582] fib6_rule_lookup+0x386/0x720 [ 176.264839][ T9582] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 176.266573][ T9582] ? __lock_acquire+0x5ca/0x1ba0 [ 176.268171][ T9582] ip6_route_output_flags+0x1d0/0x640 [ 176.269857][ T9582] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 176.271793][ T9582] ? is_bpf_text_address+0x94/0x1a0 [ 176.273426][ T9582] ? chacha_permute+0x5ae/0x6d0 [ 176.275023][ T9582] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 176.277125][ T9582] ? __lock_acquire+0x5ca/0x1ba0 [ 176.278704][ T9582] ip6_dst_lookup_flow+0x99/0x1d0 [ 176.280281][ T9582] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 176.282041][ T9582] ? find_held_lock+0x2b/0x80 [ 176.283513][ T9582] ? sctp_v6_get_dst+0x65e/0x2050 [ 176.285352][ T9582] sctp_v6_get_dst+0x6a2/0x2050 [ 176.287160][ T9582] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 176.289088][ T9582] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 176.291541][ T9582] ? lockdep_init_map_type+0x5c/0x280 [ 176.293487][ T9582] ? sctp_transport_route+0x12f/0x350 [ 176.295437][ T9582] sctp_transport_route+0x12f/0x350 [ 176.297328][ T9582] sctp_assoc_add_peer+0x741/0x1550 [ 176.299185][ T9582] sctp_connect_new_asoc+0x208/0x790 [ 176.301104][ T9582] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 176.303216][ T9582] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 176.305224][ T9582] sctp_sendmsg+0x15f9/0x1ee0 [ 176.306961][ T9582] ? __pfx_sctp_sendmsg+0x10/0x10 [ 176.308791][ T9582] ? __pfx___might_resched+0x10/0x10 [ 176.310719][ T9582] ? find_held_lock+0x2b/0x80 [ 176.312421][ T9582] ? __pfx_aa_sk_perm+0x10/0x10 [ 176.314215][ T9582] ? __import_iovec+0x1c8/0x660 [ 176.316019][ T9582] ? __pfx_sctp_sendmsg+0x10/0x10 [ 176.317869][ T9582] inet_sendmsg+0x119/0x140 [ 176.319510][ T9582] ____sys_sendmsg+0x973/0xc70 [ 176.321242][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.323160][ T9582] ? get_compat_msghdr+0x11a/0x170 [ 176.325025][ T9582] ? schedule+0x2d7/0x3a0 [ 176.326605][ T9582] ___sys_sendmsg+0x134/0x1d0 [ 176.328347][ T9582] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.330239][ T9582] ? find_held_lock+0x2b/0x80 [ 176.331947][ T9582] __sys_sendmmsg+0x2f9/0x420 [ 176.333672][ T9582] ? __pfx___sys_sendmmsg+0x10/0x10 [ 176.335548][ T9582] ? __pfx_do_futex+0x10/0x10 [ 176.337255][ T9582] ? xfd_validate_state+0x5d/0x180 [ 176.339115][ T9582] ? rcu_is_watching+0x12/0xc0 [ 176.340871][ T9582] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 176.342904][ T9582] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 176.345253][ T9582] __do_fast_syscall_32+0x73/0x120 [ 176.347110][ T9582] do_fast_syscall_32+0x32/0x80 [ 176.348889][ T9582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.351164][ T9582] RIP: 0023:0xf704e579 [ 176.352645][ T9582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.359477][ T9582] RSP: 002b:00000000f4ffc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 176.362481][ T9582] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000440 [ 176.365325][ T9582] RDX: 0000000000000001 RSI: 0000000020008050 RDI: 0000000000000000 [ 176.368170][ T9582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.370991][ T9582] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 176.373835][ T9582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.376672][ T9582] [ 176.377844][ T9582] Modules linked in: [ 176.379773][ T9582] ---[ end trace 0000000000000000 ]--- [ 176.382099][ T9582] RIP: 0010:find_match+0x136/0x15d0 [ 176.383750][ T9582] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 44 10 50 01 [ 176.409974][ T9582] RSP: 0018:ffffc9000363eb90 EFLAGS: 00010206 Connection to localhost closed by remote host. [ 176.412235][ T9582] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffc9002a239000 [ 176.415159][ T9582] RDX: 0000000000000018 RSI: ffffffff8a18a5cf RDI: 00000000000000c0 [ 176.417677][ T9582] RBP: ffffc9000363ec98 R08: 0000000000000001 R09: 0000000000000000 [ 176.420497][ T9582] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880437f9e37 [ 176.423443][ T9582] R13: ffff8880437f9e20 R14: 1ffff920006c7d81 R15: 0000000000000000 [ 176.426758][ T9582] FS: 0000000000000000(0000) GS:ffff8880978ef000(0063) knlGS:00000000f4ffcb40 [ 176.430310][ T9582] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 176.432492][ T9582] CR2: 00000000f7fe6e40 CR3: 0000000024236000 CR4: 0000000000352ef0 [ 176.435104][ T9582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.437959][ T9582] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 176.440894][ T9582] Kernel panic - not syncing: Fatal exception [ 176.443755][ T9582] Kernel Offset: disabled [ 176.445524][ T9582] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:10:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf175 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc9000363e590 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addcb40 R15=ffffffff854bf110 RIP=ffffffff854bf19f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c413ffc CR3=0000000024236000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000231f94 RBX=0000000000000001 RCX=ffffffff8b68c3e9 RDX=ffffed10056665be RSI=ffffffff8bf46720 RDI=ffffffff819130b1 RBP=ffffed1003b57488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801daba440 R14=ffffffff90850d10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f418ffc CR3=00000000293ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000004 RBX=0000000000000004 RCX=ffffffff84d4024e RDX=ffff888025888000 RSI=ffffffff84d40283 RDI=0000000000000001 RBP=ffffc9000387f328 RSP=ffffc9000387f1e8 R8 =0000000000000001 R9 =0000000000000019 R10=0000000000000004 R11=0000000000000000 R12=1ffff9200070fe47 R13=ffffc9000387f448 R14=0000000000000000 R15=ffffffff8bf4b8f0 RIP=ffffffff81baab48 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f411a4e5d00 ffffffff 00c00000 GS =0000 ffff8880979ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560890cc6000 CR3=00000000495e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000017d000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=fa2a9009fa2a9009 fa2a9009fa2a9009 fa2a9009fa2a9009 fa2a9009fa2a9009 fa2a9009fa2a9009 fa2a9009fa2a9009 fa2a9009fa2a9009 fa2a9009fa2a9009 ZMM22=562f0cba562f0cba 562f0cba562f0cba 562f0cba562f0cba 562f0cba562f0cba 562f0cba562f0cba 562f0cba562f0cba 562f0cba562f0cba 562f0cba562f0cba ZMM23=c013a11ac013a11a c013a11ac013a11a c013a11ac013a11a c013a11ac013a11a c013a11ac013a11a c013a11ac013a11a c013a11ac013a11a c013a11ac013a11a ZMM24=179c474c179c474c 179c474c179c474c 179c474c179c474c 179c474c179c474c 179c474c179c474c 179c474c179c474c 179c474c179c474c 179c474c179c474c ZMM25=fe89d089fe89d089 fe89d089fe89d089 fe89d089fe89d089 fe89d089fe89d089 fe89d089fe89d089 fe89d089fe89d089 fe89d089fe89d089 fe89d089fe89d089 ZMM26=ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ffdb05d9ffdb05d9 ZMM27=12cebf5c12cebf5c 12cebf5c12cebf5c 12cebf5c12cebf5c 12cebf5c12cebf5c 12cebf5c12cebf5c 12cebf5c12cebf5c 12cebf5c12cebf5c 12cebf5c12cebf5c ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c7080000c7080000 c7080000c7080000 c7080000c7080000 c7080000c7080000 c7080000c7080000 c7080000c7080000 c7080000c7080000 c7080000c7080000 info registers vcpu 3 CPU#3 RAX=0000000000147984 RBX=0000000000000003 RCX=ffffffff8b68c3e9 RDX=ffffed10056a65be RSI=ffffffff8bf46720 RDI=ffffffff819130b1 RBP=ffffed1003b5a000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dad0000 R14=ffffffff90850d10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd7269f9120 CR3=0000000024236000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000