last executing test programs: 16.062550525s ago: executing program 2 (id=321): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20048490}, 0x24000800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x2e, "c30b29b9429b94b5e89342bbe4b70f6cbdf1b934689baccd1a35eb765812106c3732f8cb66deff5d6ff2e7ca4442"}, &(0x7f0000000180)=0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1ffffffffffffe93, &(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd68, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r5, &(0x7f00000001c0)=@abs, 0x6e) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r4, 0x9, 0x22, 0x16, 0x2, 0x9}, &(0x7f0000000200)=0x14) r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r7, &(0x7f00000000c0)=""/29, 0x1d) r8 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) 3.954771382s ago: executing program 1 (id=353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "ab36f1265625e6c2"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "9bb35248001592ce"}, 0x6}}]}, 0x44}}, 0x0) 3.852222378s ago: executing program 1 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006440)={&(0x7f0000006380)=ANY=[@ANYBLOB="5800000001020500000000000000000000004400018006000340000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000bb0c0002800500010000000000"], 0x58}}, 0x0) r1 = userfaultfd(0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @loopback, 0x0, 0x0, 'nq\x00'}, 0x2c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x0, 0x0, 'nq\x00'}, 0x2c) sendmmsg$inet_sctp(r4, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x2, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000740)={0xa, 0x4e24, 0x400000, @loopback}, 0x1c) shutdown(r5, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000200)) unshare(0x60480) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r6, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000012000102000000000000000000000000000000000000000000000000000000000000000000000000e1c730354dc9aa4e00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000800010004d86959"], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007"], 0x1c}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.345700377s ago: executing program 1 (id=362): socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000020c0)='kyber_latency\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 2.226680012s ago: executing program 0 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 2.18486449s ago: executing program 1 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001200000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) io_setup(0x7, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010000000000000000000000000000000a3ffb01a12ff5b3c778e46ea8da1721c45c724444d47960d9831114bbd00179a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 2.059642094s ago: executing program 0 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x0) 1.952962041s ago: executing program 0 (id=375): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x10, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)) 1.951358469s ago: executing program 2 (id=342): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) select(0x0, 0x0, 0x0, 0x0, 0x0) 1.839495146s ago: executing program 0 (id=377): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"}) 1.670212548s ago: executing program 0 (id=379): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000140)=""/199, 0xc7) shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="a857e9c1fcb4f45901", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f00000001c0), 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[], 0xfffffcdd) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') sendfile(r4, r5, 0x0, 0x37) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0xfffffcdd) semget(0x2, 0x4, 0x435) 1.451203587s ago: executing program 2 (id=380): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x1064, 0x0, 0x0, 0x0, 0xffffff8d) close(r0) 1.218134453s ago: executing program 2 (id=381): socket$caif_stream(0x25, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0xc41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000013140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x10, 0x803, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x10202}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.013743271s ago: executing program 1 (id=382): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x0, [], 0x7}) 889.265796ms ago: executing program 1 (id=384): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) open$dir(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd4a}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) eventfd(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e39"], 0x78) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='-io -semory qpect\f\x00pids lnet -freezer -huetlb \x00'/57], 0x3e) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c010000160001000000000004000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0005000000000000000000050000000500"], 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r8}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000780), 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 580.25938ms ago: executing program 3 (id=387): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f00000002c0)) 508.258965ms ago: executing program 2 (id=388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x23c, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x304, 0x304, 0x304, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x104, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xdc, 0x138, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@loopback, @private0, [], [], 'pim6reg1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) 498.709854ms ago: executing program 3 (id=389): r0 = epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='nicvf0\x00', 0xf) lstat64(&(0x7f0000000080)='./cgroup\x00', 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000001c0)=0x2c) ioctl$sock_inet_SIOCDARP(r2, 0x8954, &(0x7f0000000100)={{0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x28, {0x2, 0x0, @private}, 'syz_tun\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) socket$inet(0x2, 0x80000, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x18, &(0x7f0000000340)={r5}, 0x8) 498.232795ms ago: executing program 2 (id=390): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x8) read(r0, &(0x7f0000000200)=""/209, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x48f00) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000004000140000000000900010073797a30"], 0xdc}}, 0x0) readv(r4, &(0x7f0000001500), 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f0000001840)=""/4090, 0xffa) 390.286181ms ago: executing program 0 (id=391): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f00003b7000/0x2000)=nil, 0x2000, 0x64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="47ae165e1eb38b16"]) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) r3 = socket(0xa, 0x3, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200007f00ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000100)='syz1\x00', 0x1ff) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="61202a3a2a207277d66c2020e707a408cb0b02006d8082e2f1cd7653252f31abd62a3b71beea52f7eca0758995c56e5a8c9ceeb43fe287d25f8341b47ecac88a1578ecab2dbc0a639fa498b17f6b41aa882b513efd36398b00"/103], 0xa) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @private1}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r5}, 0x10) 272.330364ms ago: executing program 3 (id=392): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 140.256053ms ago: executing program 3 (id=393): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000001060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000200)=@ethtool_ringparam={0x50}}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) 69.950111ms ago: executing program 3 (id=394): setitimer(0x0, &(0x7f0000000000)={{0x0, 0xfffffffffffffffc}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000080)='\t\x00\x00\x00', 0x4) r1 = dup(r0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 0s ago: executing program 3 (id=395): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) init_module(0x0, 0x3f00, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x10, 0x8a}, [@IFLA_WEIGHT={0x8}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x20000800) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x5}, {0x5}, {0x6}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0x9, 0x2) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10727' (ED25519) to the list of known hosts. [ 51.214555][ T5333] cgroup: Unknown subsys name 'net' [ 51.334369][ T5333] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.667568][ T5333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.644641][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.648583][ T5353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.661962][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.662354][ T5356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.666699][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.671481][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.672480][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.678583][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.682449][ T5356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.685478][ T5354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.692664][ T5356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.697741][ T5356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.702467][ T5353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.706155][ T5353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.710183][ T5353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.713436][ T5353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.718206][ T5355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.719044][ T5353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.721910][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.728333][ T5355] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.731220][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.731702][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.743802][ T5360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.747566][ T5360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.184053][ T5350] chnl_net:caif_netlink_parms(): no params data found [ 58.222574][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 58.263269][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 58.498769][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.501819][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.505940][ T5345] bridge_slave_0: entered allmulticast mode [ 58.509791][ T5345] bridge_slave_0: entered promiscuous mode [ 58.515931][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.518970][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.521955][ T5345] bridge_slave_1: entered allmulticast mode [ 58.526334][ T5345] bridge_slave_1: entered promiscuous mode [ 58.582848][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.585864][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.588660][ T5350] bridge_slave_0: entered allmulticast mode [ 58.591557][ T5350] bridge_slave_0: entered promiscuous mode [ 58.626620][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 58.638352][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.641374][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.645843][ T5350] bridge_slave_1: entered allmulticast mode [ 58.649488][ T5350] bridge_slave_1: entered promiscuous mode [ 58.679410][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.768531][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.798947][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.801846][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.804701][ T5357] bridge_slave_0: entered allmulticast mode [ 58.808432][ T5357] bridge_slave_0: entered promiscuous mode [ 58.815307][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.817926][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.821055][ T5357] bridge_slave_1: entered allmulticast mode [ 58.825082][ T5357] bridge_slave_1: entered promiscuous mode [ 58.832137][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.838555][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.990161][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.996124][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.003479][ T5350] team0: Port device team_slave_0 added [ 59.009001][ T5345] team0: Port device team_slave_0 added [ 59.013525][ T5345] team0: Port device team_slave_1 added [ 59.031498][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.034370][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.037287][ T5344] bridge_slave_0: entered allmulticast mode [ 59.040089][ T5344] bridge_slave_0: entered promiscuous mode [ 59.063822][ T5350] team0: Port device team_slave_1 added [ 59.100862][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.104214][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.107181][ T5344] bridge_slave_1: entered allmulticast mode [ 59.110361][ T5344] bridge_slave_1: entered promiscuous mode [ 59.176676][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.179584][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.190143][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.211076][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.219048][ T5357] team0: Port device team_slave_0 added [ 59.246828][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.249581][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.259551][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.267855][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.273754][ T5357] team0: Port device team_slave_1 added [ 59.276958][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.279871][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.290510][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.300843][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.303848][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.315620][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.387197][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.390283][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.401501][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.443027][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.445690][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.455430][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.485534][ T5344] team0: Port device team_slave_0 added [ 59.495869][ T5344] team0: Port device team_slave_1 added [ 59.591248][ T5345] hsr_slave_0: entered promiscuous mode [ 59.594577][ T5345] hsr_slave_1: entered promiscuous mode [ 59.635513][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.638234][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.648208][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.654557][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.657667][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.671892][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.682148][ T5350] hsr_slave_0: entered promiscuous mode [ 59.686053][ T5350] hsr_slave_1: entered promiscuous mode [ 59.689294][ T5350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.693755][ T5350] Cannot create hsr debugfs directory [ 59.792940][ T5346] Bluetooth: hci0: command tx timeout [ 59.792962][ T5353] Bluetooth: hci2: command tx timeout [ 59.793197][ T5360] Bluetooth: hci1: command tx timeout [ 59.793440][ T5360] Bluetooth: hci3: command tx timeout [ 59.815887][ T5357] hsr_slave_0: entered promiscuous mode [ 59.818885][ T5357] hsr_slave_1: entered promiscuous mode [ 59.821190][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.823889][ T5357] Cannot create hsr debugfs directory [ 59.858404][ T5344] hsr_slave_0: entered promiscuous mode [ 59.861724][ T5344] hsr_slave_1: entered promiscuous mode [ 59.865463][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.868698][ T5344] Cannot create hsr debugfs directory [ 60.316951][ T5350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.324636][ T5350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.330123][ T5350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.336960][ T5350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.393603][ T5345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.398803][ T5345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.403633][ T5345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.410312][ T5345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.470086][ T5344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.477032][ T5344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.483582][ T5344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.490670][ T5344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.539677][ T5357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.556530][ T5357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.563381][ T5357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.570150][ T5357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.649920][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.721706][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.740026][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.764231][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.767401][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.779719][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.789200][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.806443][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.809315][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.821892][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.824597][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.831242][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.833454][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.846378][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.868503][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.882923][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.885793][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.913984][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.918863][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.922068][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.952820][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.955670][ T5224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.970999][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.974313][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.049055][ T5344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.053584][ T5344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.189395][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.207440][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.235754][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.248989][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.307278][ T5344] veth0_vlan: entered promiscuous mode [ 61.314562][ T5350] veth0_vlan: entered promiscuous mode [ 61.333479][ T5350] veth1_vlan: entered promiscuous mode [ 61.365925][ T5344] veth1_vlan: entered promiscuous mode [ 61.376691][ T5345] veth0_vlan: entered promiscuous mode [ 61.419910][ T5350] veth0_macvtap: entered promiscuous mode [ 61.427673][ T5350] veth1_macvtap: entered promiscuous mode [ 61.435206][ T5357] veth0_vlan: entered promiscuous mode [ 61.442059][ T5345] veth1_vlan: entered promiscuous mode [ 61.453046][ T5357] veth1_vlan: entered promiscuous mode [ 61.470720][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.487144][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.493146][ T5344] veth0_macvtap: entered promiscuous mode [ 61.504477][ T5344] veth1_macvtap: entered promiscuous mode [ 61.508606][ T5350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.512157][ T5350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.515774][ T5350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.519366][ T5350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.555293][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.560032][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.567675][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.571976][ T5345] veth0_macvtap: entered promiscuous mode [ 61.593792][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.598513][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.604411][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.608171][ T5345] veth1_macvtap: entered promiscuous mode [ 61.622420][ T5344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.626056][ T5344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.628973][ T5344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.632635][ T5344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.637659][ T5357] veth0_macvtap: entered promiscuous mode [ 61.657619][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.661113][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.665032][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.668518][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.675977][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.679499][ T5357] veth1_macvtap: entered promiscuous mode [ 61.690387][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.690432][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.694348][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.698405][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.704214][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.707299][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.711426][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.727454][ T5345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.731042][ T5345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.735291][ T5345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.739031][ T5345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.760093][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.764964][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.769278][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.773770][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.777226][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.780670][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.785133][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.789448][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.794562][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.798166][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.802336][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.806286][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.810500][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.816927][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.821874][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.822051][ T5357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.825308][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.833812][ T5357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.837631][ T5357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.841415][ T5357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.874670][ T5353] Bluetooth: hci2: command tx timeout [ 61.874718][ T66] Bluetooth: hci1: command tx timeout [ 61.879056][ T5346] Bluetooth: hci3: command tx timeout [ 61.882370][ T66] Bluetooth: hci0: command tx timeout [ 61.961189][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.964601][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.979592][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.985111][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.013007][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.016816][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.037527][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.040608][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.058995][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.063269][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.092854][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.098839][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.235430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.305172][ T5416] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 62.734628][ T5420] serio: Serial port ptm0 [ 62.904165][ T5431] tmpfs: Bad value for 'mpol' [ 63.485552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.952526][ T66] Bluetooth: hci1: command tx timeout [ 63.954430][ T5346] Bluetooth: hci0: command tx timeout [ 63.954866][ T66] Bluetooth: hci2: command tx timeout [ 63.957307][ T5346] Bluetooth: hci3: command tx timeout [ 64.385436][ T5449] libceph: resolve '0' (ret=-3): failed [ 64.407183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.462422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.513185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.593008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.629802][ T5465] capability: warning: `syz.0.24' uses deprecated v2 capabilities in a way that may be insecure [ 64.813498][ T5473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.269579][ T5486] tipc: Failed to remove unknown binding: 66,1,1/0:3851958014/3851958016 [ 65.276401][ T5486] tipc: Failed to remove unknown binding: 66,1,1/0:3851958014/3851958016 [ 65.754011][ T5491] input: syz0 as /devices/virtual/input/input5 [ 66.032408][ T66] Bluetooth: hci2: command tx timeout [ 66.034790][ T5346] Bluetooth: hci1: command tx timeout [ 66.042581][ T5346] Bluetooth: hci3: command tx timeout [ 66.044759][ T66] Bluetooth: hci0: command tx timeout [ 66.282594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.371120][ T5502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 66.499137][ T5504] 8021q: VLANs not supported on hsr0 [ 66.805224][ T1419] IPVS: starting estimator thread 0... [ 66.836112][ T5406] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.892427][ T5523] IPVS: using max 20 ests per chain, 48000 per kthread [ 67.034129][ T5406] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 67.047609][ T5514] kvm: pic: non byte read [ 67.050850][ T5514] kvm: pic: level sensitive irq not supported [ 67.052134][ T5514] kvm: pic: non byte read [ 67.058070][ T5514] kvm: pic: single mode not supported [ 67.058081][ T5514] kvm: pic: level sensitive irq not supported [ 67.061165][ T5514] kvm: pic: non byte read [ 67.065698][ T5406] usb 5-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 67.066376][ T5514] kvm: pic: level sensitive irq not supported [ 67.069773][ T5406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.071236][ T5514] kvm: pic: non byte read [ 67.081970][ T5514] kvm: pic: non byte read [ 67.085634][ T5514] kvm: pic: non byte read [ 67.089212][ T5514] kvm: pic: non byte read [ 67.092202][ T5514] kvm: pic: level sensitive irq not supported [ 67.092731][ T5514] kvm: pic: non byte read [ 67.098822][ T5406] usb 5-1: config 0 descriptor?? [ 67.100126][ T5514] kvm: pic: non byte read [ 67.107455][ T5514] kvm: pic: non byte read [ 67.111262][ T5514] kvm: pic: level sensitive irq not supported [ 67.118261][ T5514] kvm: pic: level sensitive irq not supported [ 67.153056][ T5514] kvm: pic: level sensitive irq not supported [ 67.176569][ T5514] kvm: pic: level sensitive irq not supported [ 67.186931][ T5514] kvm: pic: level sensitive irq not supported [ 67.212628][ T5514] kvm: pic: level sensitive irq not supported [ 67.789982][ T5527] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 67.793153][ T5527] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.797960][ T5527] vhci_hcd vhci_hcd.0: Device attached [ 67.837433][ T5534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.909391][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.022406][ T8] vhci_hcd: vhci_device speed not set [ 68.112414][ T8] usb 13-2: new full-speed USB device number 2 using vhci_hcd [ 68.562011][ T39] audit: type=1326 audit(1722853293.308:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5559 comm="syz.2.58" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 68.713284][ T5528] vhci_hcd: connection reset by peer [ 68.716376][ T5406] usb 5-1: string descriptor 0 read error: -71 [ 68.719423][ T1199] vhci_hcd: stop threads [ 68.723269][ T1199] vhci_hcd: release socket [ 68.728739][ T1199] vhci_hcd: disconnect device [ 68.731639][ T5406] usb 5-1: USB disconnect, device number 2 [ 69.787606][ T5590] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 69.808825][ T5592] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 69.814253][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 69.820180][ T5592] veth1_to_team: entered promiscuous mode [ 69.826201][ T5592] veth1_to_team: entered allmulticast mode [ 70.020370][ T5597] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 70.294859][ T5610] gfs2: not a GFS2 filesystem [ 70.601395][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.88'. [ 70.658909][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 70.664999][ T5635] syzkaller1: entered promiscuous mode [ 70.667303][ T5635] syzkaller1: entered allmulticast mode [ 70.670821][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 70.941402][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 71.138566][ T5660] program syz.3.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.300341][ T5672] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 71.331064][ T5672] team0: Port device netdevsim0 added [ 71.402096][ T5665] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 71.417959][ T5665] team0: Port device netdevsim0 removed [ 71.429155][ T5665] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 71.453062][ T66] Bluetooth: hci2: Invalid handle: 0xb9b0 > 0x0eff [ 71.472451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.624869][ T64] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.752847][ T5224] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.766638][ T5686] trusted_key: syz.3.107 sent an empty control message without MSG_MORE. [ 71.802376][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 71.812057][ T64] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 71.815285][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.821307][ T64] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.826176][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.830880][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.838229][ T64] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 71.841868][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.846530][ T64] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.852331][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.856775][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.866048][ T64] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 71.869043][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.874082][ T64] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.878965][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.885122][ T64] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.912021][ T64] usb 7-1: string descriptor 0 read error: -22 [ 71.915453][ T64] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 71.919552][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.955846][ T64] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 71.960474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.982841][ T5224] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.000667][ T5224] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 72.006066][ T5224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.022398][ T5224] usb 6-1: config 0 descriptor?? [ 72.030134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.218235][ T56] usb 7-1: USB disconnect, device number 2 [ 72.925961][ T39] audit: type=1326 audit(1722853297.668:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 72.944610][ T39] audit: type=1326 audit(1722853297.668:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 72.965544][ T39] audit: type=1326 audit(1722853297.668:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 72.975352][ T39] audit: type=1326 audit(1722853297.668:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 72.984604][ T39] audit: type=1326 audit(1722853297.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 72.993901][ T39] audit: type=1326 audit(1722853297.668:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 73.003269][ T39] audit: type=1326 audit(1722853297.668:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 73.013482][ T39] audit: type=1326 audit(1722853297.668:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 73.022650][ T39] audit: type=1326 audit(1722853297.678:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5697 comm="syz.2.111" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 73.262498][ T8] vhci_hcd: vhci_device speed not set [ 73.801682][ T5707] ======================================================= [ 73.801682][ T5707] WARNING: The mand mount option has been deprecated and [ 73.801682][ T5707] and is ignored by this kernel. Remove the mand [ 73.801682][ T5707] option from the mount to silence this warning. [ 73.801682][ T5707] ======================================================= [ 73.883113][ T5707] overlayfs: failed to resolve './file1': -2 [ 74.138825][ T103] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.294734][ T5722] Bluetooth: MGMT ver 1.23 [ 74.307304][ T5224] usb 6-1: USB disconnect, device number 2 [ 74.511277][ T5729] Bluetooth: MGMT ver 1.23 [ 74.594856][ T5346] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 74.598852][ T5346] Bluetooth: hci2: Injecting HCI hardware error event [ 74.602802][ T5346] Bluetooth: hci2: hardware error 0x00 [ 75.232405][ T5353] Bluetooth: hci1: command tx timeout [ 75.632388][ T1162] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.826963][ T1162] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.835313][ T1162] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.839144][ T1162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.843205][ T1162] usb 6-1: SerialNumber: syz [ 76.085532][ T39] kauditd_printk_skb: 46 callbacks suppressed [ 76.085546][ T39] audit: type=1804 audit(1722853300.838:58): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.141" name="/newroot/40/bus/bus" dev="overlay" ino=231 res=1 errno=0 [ 76.114461][ T5772] evm: overlay not supported [ 76.118636][ T5774] ucma_write: process 117 (syz.0.142) changed security contexts after opening file descriptor, this is not allowed. [ 76.122834][ T5772] Invalid ELF header magic: != ELF [ 76.193255][ T5353] Bluetooth: hci4: command 0x1003 tx timeout [ 76.196728][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.349183][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.353391][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.435498][ T5756] netlink: 19 bytes leftover after parsing attributes in process `syz.1.135'. [ 76.447449][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.450153][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.520259][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.531012][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.568533][ T1162] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 76.577044][ T1162] usb 6-1: USB disconnect, device number 3 [ 76.672301][ T5346] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 76.903389][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.020396][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.114605][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.202461][ T5346] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 77.208206][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.275325][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 77.298227][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.303264][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.306962][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.313080][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.318412][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.329596][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.434066][ T1104] bridge_slave_1: left allmulticast mode [ 77.436799][ T1104] bridge_slave_1: left promiscuous mode [ 77.440809][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.451003][ T1104] bridge_slave_0: left allmulticast mode [ 77.460315][ T1104] bridge_slave_0: left promiscuous mode [ 77.468059][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.567438][ T5224] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 77.742334][ T5224] usb 8-1: Using ep0 maxpacket: 8 [ 77.746727][ T5224] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.751396][ T5224] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.755762][ T5224] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.759877][ T5224] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.765661][ T5224] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.769383][ T5224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.805055][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.812528][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.818047][ T1104] bond0 (unregistering): Released all slaves [ 77.837941][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.021803][ T5224] usb 8-1: GET_CAPABILITIES returned 0 [ 78.024488][ T5224] usbtmc 8-1:16.0: can't read capabilities [ 78.086498][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 78.213442][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 78.244632][ T57] usb 8-1: USB disconnect, device number 2 [ 78.451407][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.455214][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.458855][ T5824] bridge_slave_0: entered allmulticast mode [ 78.463124][ T5824] bridge_slave_0: entered promiscuous mode [ 78.485249][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.488240][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.491579][ T5824] bridge_slave_1: entered allmulticast mode [ 78.496685][ T5824] bridge_slave_1: entered promiscuous mode [ 78.612464][ T1104] hsr_slave_0: left promiscuous mode [ 78.616168][ T1104] hsr_slave_1: left promiscuous mode [ 78.621213][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.628802][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.641353][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.649870][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.705031][ T1104] veth1_macvtap: left promiscuous mode [ 78.709504][ T1104] veth0_macvtap: left promiscuous mode [ 78.712008][ T1104] veth1_vlan: left promiscuous mode [ 78.716491][ T1104] veth0_vlan: left promiscuous mode [ 79.394216][ T66] Bluetooth: hci0: command tx timeout [ 79.733602][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 79.878476][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 80.027233][ T5900] Illegal XDP return value 41 on prog (id 37) dev N/A, expect packet loss! [ 80.171987][ T39] audit: type=1107 audit(1722853304.918:59): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ª»' [ 80.409354][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.423643][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'. [ 80.439400][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 80.514353][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.647560][ T5824] team0: Port device team_slave_0 added [ 80.658542][ T5824] team0: Port device team_slave_1 added [ 80.667346][ T5910] process 'syz.0.192' launched './file0' with NULL argv: empty string added [ 80.732160][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.735347][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.754540][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.760532][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.763606][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.773989][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.871663][ T5824] hsr_slave_0: entered promiscuous mode [ 80.875433][ T5824] hsr_slave_1: entered promiscuous mode [ 80.883760][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.889664][ T5824] Cannot create hsr debugfs directory [ 81.173547][ T5939] netlink: 830 bytes leftover after parsing attributes in process `syz.1.197'. [ 81.325600][ T5931] infiniband syz1: set down [ 81.330516][ T5931] infiniband syz1: added syzkaller0 [ 81.369347][ T5931] RDS/IB: syz1: added [ 81.373233][ T5931] smc: adding ib device syz1 with port count 1 [ 81.376357][ T5931] smc: ib device syz1 port 1 has pnetid [ 81.472303][ T66] Bluetooth: hci0: command tx timeout [ 81.556005][ T5955] warning: `syz.3.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.602346][ T832] cfg80211: failed to load regulatory.db [ 81.628546][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.637770][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.654133][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.670632][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.796522][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.817613][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.826812][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.830555][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.845866][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.849010][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.921730][ T5957] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 81.927166][ T5957] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 81.931115][ T5957] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 81.946512][ T13] smc: removing ib device syz1 [ 82.070981][ T39] audit: type=1326 audit(1722853306.818:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.0.203" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 82.099601][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.150860][ T5824] veth0_vlan: entered promiscuous mode [ 82.164537][ T5824] veth1_vlan: entered promiscuous mode [ 82.196540][ T5824] veth0_macvtap: entered promiscuous mode [ 82.203558][ T5824] veth1_macvtap: entered promiscuous mode [ 82.220503][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.235595][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.239816][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.246113][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.251989][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.258336][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.267937][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.287128][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.295628][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.300218][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.307410][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.313313][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.318176][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.325790][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.333654][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.337159][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341083][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.345360][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.441267][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.446453][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.476676][ T5931] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 82.490507][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.495943][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.567947][ T66] Bluetooth: hci0: command tx timeout [ 84.294995][ T39] audit: type=1326 audit(1722853309.048:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.213" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77579 code=0x0 [ 84.390411][ T1104] Bluetooth: Short BCSP packet [ 84.465975][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.605061][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.642964][ T1104] Bluetooth: Error in BCSP hdr checksum [ 84.697487][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.846167][ T1099] bond0: (slave netdevsim0): Releasing backup interface [ 84.861524][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.872982][ T5353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.879358][ T5353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.884054][ T5353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.893744][ T5353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.905763][ T5353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.909485][ T5353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.063590][ T1099] bridge_slave_1: left allmulticast mode [ 85.066094][ T1099] bridge_slave_1: left promiscuous mode [ 85.068753][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.086763][ T1099] bridge_slave_0: left allmulticast mode [ 85.116371][ T1099] bridge_slave_0: left promiscuous mode [ 85.119331][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.476008][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.485760][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.494121][ T1099] bond0 (unregistering): Released all slaves [ 85.632315][ T5353] Bluetooth: hci0: command tx timeout [ 85.647355][ T6032] chnl_net:caif_netlink_parms(): no params data found [ 85.916567][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919194][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.932086][ T6032] bridge_slave_0: entered allmulticast mode [ 85.938881][ T6032] bridge_slave_0: entered promiscuous mode [ 85.964848][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.968107][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.971609][ T6032] bridge_slave_1: entered allmulticast mode [ 85.976624][ T6032] bridge_slave_1: entered promiscuous mode [ 86.052981][ T1099] hsr_slave_0: left promiscuous mode [ 86.056411][ T1099] hsr_slave_1: left promiscuous mode [ 86.059777][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.063362][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.067486][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.070968][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.111242][ T1099] veth1_macvtap: left promiscuous mode [ 86.114223][ T1099] veth0_macvtap: left promiscuous mode [ 86.116870][ T1099] veth1_vlan: left promiscuous mode [ 86.119322][ T1099] veth0_vlan: left promiscuous mode [ 86.122424][ T66] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 86.453397][ T6062] IPVS: length: 174 != 1776 [ 86.575431][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 86.993682][ T66] Bluetooth: hci4: command tx timeout [ 86.999312][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 87.070482][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 87.379310][ T6064] Falling back ldisc for ptm0. [ 87.830640][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.843370][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.918441][ T6073] netlink: 'syz.2.224': attribute type 15 has an invalid length. [ 88.028070][ T6032] team0: Port device team_slave_0 added [ 88.037872][ T6032] team0: Port device team_slave_1 added [ 88.095004][ T6079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.098835][ T6079] IPv6: NLM_F_CREATE should be set when creating new route [ 88.101901][ T6079] IPv6: NLM_F_CREATE should be set when creating new route [ 88.107363][ T6082] Zero length message leads to an empty skb [ 88.151098][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.154751][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.165436][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.171678][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.175178][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.188074][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.303605][ T6032] hsr_slave_0: entered promiscuous mode [ 88.308939][ T6032] hsr_slave_1: entered promiscuous mode [ 88.313464][ T6032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.316835][ T6032] Cannot create hsr debugfs directory [ 88.410923][ T1099] IPVS: stop unused estimator thread 0... [ 88.464399][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.231'. [ 88.988818][ T6032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.003407][ T6032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.021784][ T6032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.031620][ T6032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.082829][ T66] Bluetooth: hci4: command tx timeout [ 89.108704][ T39] audit: type=1326 audit(1722853313.858:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.2.232" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 89.118404][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.138038][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.153832][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.156958][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.162877][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.165941][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.369870][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.411859][ T6032] veth0_vlan: entered promiscuous mode [ 89.421841][ T6032] veth1_vlan: entered promiscuous mode [ 89.453858][ T6032] veth0_macvtap: entered promiscuous mode [ 89.460312][ T6032] veth1_macvtap: entered promiscuous mode [ 89.478395][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.487949][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.494591][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.499558][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.504775][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.509147][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.519635][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.535063][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.540226][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.547153][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.551895][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.559760][ T6032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.565465][ T6032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.573998][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.585621][ T6032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.589802][ T6032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.594634][ T6032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.598416][ T6032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.724887][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.729415][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.752601][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.756093][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.756109][ T39] audit: type=1326 audit(1722853315.508:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.0.240" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 90.873792][ T6154] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 90.896071][ T6154] team0: Failed to send options change via netlink (err -105) [ 90.899290][ T6154] team0: Port device netdevsim0 added [ 90.952683][ T64] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 91.164603][ T66] Bluetooth: hci4: command tx timeout [ 92.001994][ T39] audit: type=1800 audit(1722853316.748:64): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file2" dev="overlay" ino=507 res=0 errno=0 [ 92.807836][ T6194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.257'. [ 93.232628][ T66] Bluetooth: hci4: command tx timeout [ 95.168159][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.339254][ T5353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.345270][ T5353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.349128][ T5353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.353281][ T5353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.357260][ T5353] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.360774][ T5353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.363768][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.367937][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 95.372848][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.378949][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.384132][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.387869][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.393588][ T25] usb 5-1: config 0 descriptor?? [ 95.396308][ T6214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.524444][ T6223] chnl_net:caif_netlink_parms(): no params data found [ 95.652280][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.655409][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.658231][ T6223] bridge_slave_0: entered allmulticast mode [ 95.661444][ T6223] bridge_slave_0: entered promiscuous mode [ 95.665946][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.668913][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.672033][ T6223] bridge_slave_1: entered allmulticast mode [ 95.676440][ T6223] bridge_slave_1: entered promiscuous mode [ 95.740401][ T6223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.749829][ T6223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.823654][ T6223] team0: Port device team_slave_0 added [ 95.831902][ T6223] team0: Port device team_slave_1 added [ 95.836953][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.850562][ T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 95.928911][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.931747][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.945053][ T6223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.953812][ T6223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.956870][ T6223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.969772][ T6223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.080404][ T6223] hsr_slave_0: entered promiscuous mode [ 96.093310][ T6223] hsr_slave_1: entered promiscuous mode [ 96.096385][ T6223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.099578][ T6223] Cannot create hsr debugfs directory [ 96.117904][ T8] usb 5-1: USB disconnect, device number 3 [ 96.321038][ T6223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.403234][ T6223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.478585][ T6223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.559115][ T6223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.739714][ T6223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.748616][ T6223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.759476][ T6223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.781696][ T6223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.926567][ T6223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.946694][ T6223] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.956695][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.959785][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.973935][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.977015][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.156346][ T6223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.193418][ T6223] veth0_vlan: entered promiscuous mode [ 97.205408][ T6223] veth1_vlan: entered promiscuous mode [ 97.237299][ T6223] veth0_macvtap: entered promiscuous mode [ 97.244561][ T6223] veth1_macvtap: entered promiscuous mode [ 97.276465][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.281779][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.287718][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.292104][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.296315][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.300683][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.304972][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.309727][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.316330][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.327116][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.331557][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.336018][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.340488][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.345072][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.349633][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.353958][ T6223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.358658][ T6223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.365906][ T6223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.374997][ T6223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.378836][ T6223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.383636][ T6223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.387349][ T6223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.402456][ T5353] Bluetooth: hci2: command tx timeout [ 97.456328][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.459645][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.480750][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.486062][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.650222][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 97.697378][ T6277] mkiss: ax0: crc mode is auto. [ 98.490520][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.278'. [ 99.429493][ T6312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.297'. [ 99.472480][ T5353] Bluetooth: hci2: command tx timeout [ 99.533884][ T39] audit: type=1326 audit(1722853324.288:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.0.289" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 100.518381][ T6326] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 100.551366][ T6326] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 100.576324][ T6326] team0: Port device netdevsim0 removed [ 100.592155][ T6326] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.621876][ T5353] Bluetooth: hci3: Invalid handle: 0xb9b0 > 0x0eff [ 101.552362][ T5353] Bluetooth: hci2: command tx timeout [ 103.632791][ T5353] Bluetooth: hci2: command tx timeout [ 104.127109][ T39] audit: type=1326 audit(1722853328.878:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.1.303" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 105.019082][ T6367] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 105.029798][ T6367] team0: Port device netdevsim0 added [ 105.057814][ T6367] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 105.078141][ T6367] team0: Port device netdevsim0 removed [ 105.082498][ T6367] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.101701][ T5353] Bluetooth: hci2: Invalid handle: 0xb9b0 > 0x0eff [ 107.670186][ T1104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.762879][ T1104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.838968][ T1104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.918052][ T1104] bond0: (slave netdevsim0): Releasing backup interface [ 107.924326][ T1104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.990203][ T5353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.000184][ T5353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.004540][ T5353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.015540][ T5353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.019354][ T5353] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.022940][ T5353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.106785][ T1104] bridge_slave_1: left allmulticast mode [ 108.108694][ T1104] bridge_slave_1: left promiscuous mode [ 108.110855][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.126978][ T1104] bridge_slave_0: left allmulticast mode [ 108.129408][ T1104] bridge_slave_0: left promiscuous mode [ 108.133059][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.317853][ T6407] picdev_read: 55 callbacks suppressed [ 108.317871][ T6407] kvm: pic: non byte read [ 108.333839][ T6407] pic_ioport_write: 13 callbacks suppressed [ 108.333854][ T6407] kvm: pic: level sensitive irq not supported [ 108.339191][ T6407] kvm: pic: non byte read [ 108.344672][ T6407] kvm: pic: single mode not supported [ 108.344688][ T6407] kvm: pic: level sensitive irq not supported [ 108.349820][ T6407] kvm: pic: non byte read [ 108.361718][ T6407] kvm: pic: level sensitive irq not supported [ 108.362084][ T6407] kvm: pic: non byte read [ 108.374917][ T6407] kvm: pic: non byte read [ 108.380895][ T6407] kvm: pic: non byte read [ 108.389660][ T6407] kvm: pic: non byte read [ 108.398650][ T6407] kvm: pic: level sensitive irq not supported [ 108.399012][ T6407] kvm: pic: non byte read [ 108.405671][ T6407] kvm: pic: non byte read [ 108.425435][ T6407] kvm: pic: non byte read [ 108.432946][ T6407] kvm: pic: level sensitive irq not supported [ 108.440192][ T6407] kvm: pic: level sensitive irq not supported [ 108.457126][ T6407] kvm: pic: level sensitive irq not supported [ 108.471345][ T6407] kvm: pic: level sensitive irq not supported [ 108.486368][ T6407] kvm: pic: level sensitive irq not supported [ 108.492809][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.501755][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.505938][ T6407] kvm: pic: level sensitive irq not supported [ 108.513410][ T1104] bond0 (unregistering): Released all slaves [ 108.880113][ T6404] chnl_net:caif_netlink_parms(): no params data found [ 109.034259][ T1104] hsr_slave_0: left promiscuous mode [ 109.037597][ T1104] hsr_slave_1: left promiscuous mode [ 109.041103][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.045780][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.049408][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.053606][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.101785][ T1104] veth1_macvtap: left promiscuous mode [ 109.107438][ T1104] veth0_macvtap: left promiscuous mode [ 109.110032][ T1104] veth1_vlan: left promiscuous mode [ 109.113502][ T1104] veth0_vlan: left promiscuous mode [ 110.013212][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 110.123744][ T66] Bluetooth: hci2: command tx timeout [ 110.130674][ T64] IPVS: starting estimator thread 0... [ 110.170409][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 110.232366][ T6440] IPVS: using max 19 ests per chain, 45600 per kthread [ 111.193764][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.197840][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.201818][ T6404] bridge_slave_0: entered allmulticast mode [ 111.217456][ T6404] bridge_slave_0: entered promiscuous mode [ 111.227698][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.231126][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.238747][ T6404] bridge_slave_1: entered allmulticast mode [ 111.247835][ T6404] bridge_slave_1: entered promiscuous mode [ 111.346794][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.353560][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.410344][ T6404] team0: Port device team_slave_0 added [ 111.423195][ T6404] team0: Port device team_slave_1 added [ 111.476874][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.479525][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.498418][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.507082][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.509740][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.519574][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.585825][ T6404] hsr_slave_0: entered promiscuous mode [ 111.590090][ T6404] hsr_slave_1: entered promiscuous mode [ 111.595857][ T6404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.598905][ T6404] Cannot create hsr debugfs directory [ 112.202485][ T66] Bluetooth: hci2: command tx timeout [ 112.446889][ T6404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.459507][ T6404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.473463][ T6404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.480253][ T6404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.561149][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.575437][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.583783][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.586711][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.603339][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.606365][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.637944][ T6404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.643546][ T6404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.854355][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.927161][ T6404] veth0_vlan: entered promiscuous mode [ 112.944727][ T6404] veth1_vlan: entered promiscuous mode [ 113.002592][ T6404] veth0_macvtap: entered promiscuous mode [ 113.008886][ T6404] veth1_macvtap: entered promiscuous mode [ 113.033397][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.037289][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.040828][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.046193][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.050515][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.054247][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.058254][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.062633][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.070522][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.098365][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.106723][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.110917][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.120144][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.136354][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.140859][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.152282][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.156814][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.162947][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.171504][ T6404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.180181][ T6404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.184684][ T6404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.188508][ T6404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.274117][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.277635][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.286178][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.289466][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.387469][ T6494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'. [ 113.465563][ T6494] syzkaller1: entered promiscuous mode [ 113.467975][ T6494] syzkaller1: entered allmulticast mode [ 114.272366][ T66] Bluetooth: hci2: command tx timeout [ 115.422267][ T6527] binder: Bad value for 'max' [ 115.515885][ T6528] dlm: plock device version mismatch: kernel (1.2.0), user (314645249.2892448523.1886894762) [ 116.352372][ T66] Bluetooth: hci2: command tx timeout [ 117.293153][ T5353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.308871][ T5353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.317395][ T5353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.327239][ T5353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.331966][ T5353] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 117.335559][ T5353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.626870][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 117.775487][ T6568] 9pnet_fd: Insufficient options for proto=fd [ 117.918010][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.923876][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.927298][ T6553] bridge_slave_0: entered allmulticast mode [ 117.934543][ T6553] bridge_slave_0: entered promiscuous mode [ 117.942551][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.946246][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.949700][ T6553] bridge_slave_1: entered allmulticast mode [ 117.961834][ T6553] bridge_slave_1: entered promiscuous mode [ 118.164226][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.175421][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.307767][ T6553] team0: Port device team_slave_0 added [ 118.313323][ T6553] team0: Port device team_slave_1 added [ 118.423765][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.426513][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.453436][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.462899][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.466032][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.483830][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.593683][ T6553] hsr_slave_0: entered promiscuous mode [ 118.613406][ T6553] hsr_slave_1: entered promiscuous mode [ 118.616710][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.622291][ T6553] Cannot create hsr debugfs directory [ 118.925385][ T6585] batadv_slave_0: entered promiscuous mode [ 118.964139][ T6553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.050564][ T6583] batadv_slave_0: left promiscuous mode [ 119.118819][ T6595] netlink: 68 bytes leftover after parsing attributes in process `syz.1.354'. [ 119.131737][ T5388] IPVS: starting estimator thread 0... [ 119.138213][ T6595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.161774][ T6553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.235309][ T6596] IPVS: using max 35 ests per chain, 84000 per kthread [ 119.294663][ T6553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.392757][ T66] Bluetooth: hci5: command tx timeout [ 119.459334][ T6553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.550519][ T6595] syz.1.354 (6595) used greatest stack depth: 20976 bytes left [ 119.720067][ T6553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.744607][ T6553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.751466][ T6553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.765123][ T6553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.786762][ T6615] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 120.009358][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.049731][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.094146][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.097527][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.120373][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.123899][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.391122][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.431439][ T6553] veth0_vlan: entered promiscuous mode [ 120.449385][ T6553] veth1_vlan: entered promiscuous mode [ 120.483118][ T6553] veth0_macvtap: entered promiscuous mode [ 120.515418][ T6553] veth1_macvtap: entered promiscuous mode [ 120.530898][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.536036][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.540148][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.545013][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.549101][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.553932][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.557966][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.562112][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.566652][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.571326][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.582127][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.591269][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.597480][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.601820][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.606978][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.611400][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.616500][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.620869][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.626842][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.631196][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.637125][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.643711][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.653744][ T6553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.657787][ T6553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.661691][ T6553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.666611][ T6553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.810713][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.818726][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.887319][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.891523][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.905931][ T39] audit: type=1326 audit(1722853345.658:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 120.925784][ T39] audit: type=1326 audit(1722853345.658:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 120.940572][ T39] audit: type=1326 audit(1722853345.668:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 120.958987][ T39] audit: type=1326 audit(1722853345.668:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 121.016371][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'. [ 121.020472][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'. [ 121.482364][ T66] Bluetooth: hci5: command tx timeout [ 121.889536][ T6679] picdev_read: 55 callbacks suppressed [ 121.889546][ T6679] kvm: pic: non byte read [ 121.894735][ T6679] pic_ioport_write: 13 callbacks suppressed [ 121.894747][ T6679] kvm: pic: level sensitive irq not supported [ 121.897553][ T6679] kvm: pic: non byte read [ 121.903236][ T6679] kvm: pic: single mode not supported [ 121.903248][ T6679] kvm: pic: level sensitive irq not supported [ 121.905989][ T6679] kvm: pic: non byte read [ 121.912839][ T6679] kvm: pic: level sensitive irq not supported [ 121.913220][ T6679] kvm: pic: non byte read [ 121.920792][ T6679] kvm: pic: non byte read [ 121.924048][ T6679] kvm: pic: non byte read [ 121.927336][ T6679] kvm: pic: non byte read [ 121.930224][ T6679] kvm: pic: level sensitive irq not supported [ 121.930592][ T6679] kvm: pic: non byte read [ 121.936899][ T6679] kvm: pic: non byte read [ 121.940203][ T6679] kvm: pic: non byte read [ 121.943040][ T6679] kvm: pic: level sensitive irq not supported [ 121.946954][ T6679] kvm: pic: level sensitive irq not supported [ 121.954331][ T6679] kvm: pic: level sensitive irq not supported [ 121.962977][ T6679] kvm: pic: level sensitive irq not supported [ 121.970029][ T6679] kvm: pic: level sensitive irq not supported [ 121.983252][ T6679] kvm: pic: level sensitive irq not supported [ 122.284042][ T6692] netlink: 'syz.3.386': attribute type 2 has an invalid length. [ 122.352357][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 122.542293][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 122.549592][ T8] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.561206][ T8] usb 6-1: config 179 has no interface number 0 [ 122.564434][ T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.569605][ T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.579524][ T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.586291][ T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.591870][ T8] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.604616][ T8] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.606282][ T39] audit: type=1326 audit(1722853347.358:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.0.391" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 122.615165][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.633614][ T6688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.761387][ T6708] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 122.774352][ T6713] netlink: 'syz.3.393': attribute type 13 has an invalid length. [ 122.778284][ T6713] macvtap0: entered allmulticast mode [ 122.780320][ T6713] veth0_macvtap: entered allmulticast mode [ 122.784455][ T6713] macvtap0: refused to change device tx_queue_len [ 123.125711][ T39] audit: type=1326 audit(1722853347.878:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.395" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 123.178611][ T6688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.384'. [ 123.418913][ T25] usb 6-1: USB disconnect, device number 4 [ 123.419002][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.424504][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 123.428741][ C0] ================================================================== [ 123.432244][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x101f/0x1230 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.435261][ C0] Read of size 1 at addr ffff888015670091 by task syz.2.390/6697 [ 123.453513][ C0] [ 123.454340][ C0] CPU: 0 UID: 0 PID: 6697 Comm: syz.2.390 Not tainted 6.11.0-rc2-syzkaller #0 [ 123.457332][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.460958][ C0] Call Trace: [ 123.462223][ C0] [ 123.463503][ C0] dump_stack_lvl+0x116/0x1f0 [ 123.465428][ C0] print_report+0xc3/0x620 [ 123.467261][ C0] ? __virt_addr_valid+0x5e/0x590 [ 123.473344][ C0] ? __phys_addr+0xc6/0x150 [ 123.475277][ C0] kasan_report+0xd9/0x110 [ 123.477216][ C0] ? register_lock_class+0x101f/0x1230 [ 123.479517][ C0] ? register_lock_class+0x101f/0x1230 [ 123.481823][ C0] register_lock_class+0x101f/0x1230 [ 123.484068][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 123.486476][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 123.488769][ C0] __lock_acquire+0x135/0x3cb0 [ 123.490667][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 123.492768][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 123.494933][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 123.497099][ C0] lock_acquire+0x1b1/0x560 [ 123.499048][ C0] ? __wake_up+0x1c/0x60 [ 123.500875][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 123.502981][ C0] ? find_held_lock+0x2d/0x110 [ 123.504953][ C0] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 123.506618][ C0] ? __pfx_lock_release+0x10/0x10 [ 123.508255][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 123.510584][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 123.512720][ C0] ? __wake_up+0x1c/0x60 [ 123.514507][ C0] __wake_up+0x1c/0x60 [ 123.516229][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 123.518547][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 123.520436][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 123.522476][ C0] dummy_timer+0x13c2/0x3500 [ 123.524463][ C0] ? __pfx_lock_release+0x10/0x10 [ 123.526638][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 123.528916][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 123.531220][ C0] ? find_held_lock+0x2d/0x110 [ 123.533360][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.535477][ C0] ? timerqueue_del+0x83/0x150 [ 123.537506][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.539813][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 123.541920][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 123.544394][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 123.547007][ C0] hrtimer_interrupt+0x31b/0x800 [ 123.549181][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 123.551727][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 123.553929][ C0] [ 123.555236][ C0] [ 123.556497][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.558677][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 123.560779][ C0] Code: df 55 65 48 8b 2d a4 3a fc 74 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 8f fa 53 f6 e8 6a c9 8a f6 fb bf 01 00 00 00 4f a3 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 bd 9e 53 [ 123.568333][ C0] RSP: 0000:ffffc9000e88fe68 EFLAGS: 00000206 [ 123.570830][ C0] RAX: 00000000000053a5 RBX: ffffed10047da488 RCX: 1ffffffff2021ad9 [ 123.573806][ C0] RDX: 0000000000000000 RSI: ffffffff8b4ccfc0 RDI: 0000000000000001 [ 123.576978][ C0] RBP: ffff888023ed2440 R08: 0000000000000001 R09: 0000000000000001 [ 123.580032][ C0] R10: ffffffff90111b1f R11: 0000000000000000 R12: 0000000000000000 [ 123.583091][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.585997][ C0] ? preempt_schedule_irq+0x46/0x90 [ 123.587984][ C0] irqentry_exit+0x36/0x90 [ 123.589562][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 123.591537][ C0] RIP: 0010:irqentry_exit_to_user_mode+0x120/0x280 [ 123.594306][ C0] Code: 9c 58 fa f6 c4 02 0f 85 18 01 00 00 e8 69 0e 00 00 48 8b 5d 00 f7 c3 0e 30 02 00 0f 84 2b ff ff ff e8 b4 23 8c f6 fb f6 c3 08 <75> bd f6 c7 10 74 c2 4c 89 e7 e8 01 72 b6 f6 f7 c3 04 00 02 00 74 [ 123.602218][ C0] RSP: 0000:ffffc9000e88ff38 EFLAGS: 00000202 [ 123.604460][ C0] RAX: 00000000000053a3 RBX: 0000000020000008 RCX: 1ffffffff2021ad9 [ 123.607726][ C0] RDX: 0000000000000000 RSI: ffffffff8b4ccfc0 RDI: ffffffff8bb041e0 [ 123.610199][ C0] RBP: ffff888023ed2440 R08: 0000000000000001 R09: 0000000000000001 [ 123.612554][ C0] R10: ffffffff90111b1f R11: ffff88802c128a40 R12: ffffc9000e88ff58 [ 123.615274][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.618537][ C0] ? irqentry_exit_to_user_mode+0x11c/0x280 [ 123.621033][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 123.623217][ C0] RIP: 0023:0xf71cd592 [ 123.624638][ C0] Code: 8b 45 08 8b 4d 0c 83 c5 08 89 ce 39 d0 19 fe 72 ef 89 44 24 0c 8b 44 24 10 89 4c 24 10 8b 74 24 14 83 e8 08 89 f9 39 f2 19 d9 <73> 15 8d 74 26 00 8b 70 f8 8b 58 fc 83 e8 08 89 f9 39 f2 19 d9 72 [ 123.631140][ C0] RSP: 002b:00000000ffd5d2e0 EFLAGS: 00000246 [ 123.633302][ C0] RAX: 00000000f69ecdd0 RBX: 00000000ffffffff RCX: 0000000000000000 [ 123.635863][ C0] RDX: 0000000081393acc RSI: 0000000081393acc RDI: 00000000ffffffff [ 123.638575][ C0] RBP: 00000000f69eccb0 R08: 0000000000000000 R09: 0000000000000000 [ 123.641857][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.645154][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.648431][ C0] [ 123.649734][ C0] [ 123.650667][ C0] Allocated by task 8: [ 123.652215][ C0] kasan_save_stack+0x33/0x60 [ 123.654207][ C0] kasan_save_track+0x14/0x30 [ 123.656301][ C0] __kasan_kmalloc+0xaa/0xb0 [ 123.658094][ C0] xpad_probe+0x27e/0x1e60 [ 123.660005][ C0] usb_probe_interface+0x309/0x9d0 [ 123.662125][ C0] really_probe+0x23e/0xa90 [ 123.663670][ C0] __driver_probe_device+0x1de/0x440 [ 123.665565][ C0] driver_probe_device+0x4c/0x1b0 [ 123.667363][ C0] __device_attach_driver+0x1df/0x310 [ 123.669489][ C0] bus_for_each_drv+0x157/0x1e0 [ 123.671483][ C0] __device_attach+0x1e8/0x4b0 [ 123.673485][ C0] bus_probe_device+0x17f/0x1c0 [ 123.675541][ C0] device_add+0x114b/0x1a70 [ 123.677463][ C0] usb_set_configuration+0x10ea/0x1ca0 [ 123.679786][ C0] usb_generic_driver_probe+0xb1/0x110 [ 123.682109][ C0] usb_probe_device+0xec/0x3e0 [ 123.684206][ C0] really_probe+0x23e/0xa90 [ 123.686055][ C0] __driver_probe_device+0x1de/0x440 [ 123.687905][ C0] driver_probe_device+0x4c/0x1b0 [ 123.690030][ C0] __device_attach_driver+0x1df/0x310 [ 123.692212][ C0] bus_for_each_drv+0x157/0x1e0 [ 123.694320][ C0] __device_attach+0x1e8/0x4b0 [ 123.696305][ C0] bus_probe_device+0x17f/0x1c0 [ 123.698213][ C0] device_add+0x114b/0x1a70 [ 123.700190][ C0] usb_new_device+0xd2c/0x1960 [ 123.702242][ C0] hub_event+0x2db0/0x4e20 [ 123.704126][ C0] process_one_work+0x958/0x1ad0 [ 123.706308][ C0] worker_thread+0x6c8/0xf20 [ 123.708331][ C0] kthread+0x2c1/0x3a0 [ 123.710094][ C0] ret_from_fork+0x45/0x80 [ 123.712025][ C0] ret_from_fork_asm+0x1a/0x30 [ 123.714022][ C0] [ 123.715057][ C0] Freed by task 25: [ 123.716685][ C0] kasan_save_stack+0x33/0x60 [ 123.718907][ C0] kasan_save_track+0x14/0x30 [ 123.721032][ C0] kasan_save_free_info+0x3b/0x60 [ 123.723006][ C0] poison_slab_object+0xf7/0x160 [ 123.725163][ C0] __kasan_slab_free+0x32/0x50 [ 123.727198][ C0] kfree+0x12a/0x3b0 [ 123.728734][ C0] xpad_disconnect+0x1cf/0x580 [ 123.730772][ C0] usb_unbind_interface+0x1e8/0x970 [ 123.733070][ C0] device_remove+0x122/0x170 [ 123.735136][ C0] device_release_driver_internal+0x44a/0x610 [ 123.737808][ C0] bus_remove_device+0x22f/0x420 [ 123.740014][ C0] device_del+0x396/0x9f0 [ 123.741982][ C0] usb_disable_device+0x36c/0x7f0 [ 123.744151][ C0] usb_disconnect+0x2e1/0x920 [ 123.746140][ C0] hub_event+0x1dbb/0x4e20 [ 123.748165][ C0] process_one_work+0x958/0x1ad0 [ 123.750297][ C0] worker_thread+0x6c8/0xf20 [ 123.752269][ C0] kthread+0x2c1/0x3a0 [ 123.753992][ C0] ret_from_fork+0x45/0x80 [ 123.755855][ C0] ret_from_fork_asm+0x1a/0x30 [ 123.757889][ C0] [ 123.758862][ C0] The buggy address belongs to the object at ffff888015670000 [ 123.758862][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 123.764663][ C0] The buggy address is located 145 bytes inside of [ 123.764663][ C0] freed 1024-byte region [ffff888015670000, ffff888015670400) [ 123.770502][ C0] [ 123.771533][ C0] The buggy address belongs to the physical page: [ 123.774049][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15670 [ 123.777724][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 123.781361][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 123.784594][ C0] page_type: 0xfdffffff(slab) [ 123.786691][ C0] raw: 00fff00000000040 ffff888015842dc0 dead000000000100 dead000000000122 [ 123.790489][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 123.794249][ C0] head: 00fff00000000040 ffff888015842dc0 dead000000000100 dead000000000122 [ 123.797953][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 123.801589][ C0] head: 00fff00000000003 ffffea0000559c01 ffffffffffffffff 0000000000000000 [ 123.804959][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 123.808676][ C0] page dumped because: kasan: bad access detected [ 123.811486][ C0] page_owner tracks the page as allocated [ 123.813798][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5357, tgid 5357 (syz-executor), ts 60797804255, free_ts 59797259235 [ 123.820463][ C0] post_alloc_hook+0x2d1/0x350 [ 123.822370][ C0] get_page_from_freelist+0x1351/0x2e50 [ 123.824491][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 123.826544][ C0] alloc_slab_page+0x4e/0xf0 [ 123.828344][ C0] new_slab+0x84/0x260 [ 123.829869][ C0] ___slab_alloc+0xdac/0x1870 [ 123.831492][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 123.833659][ C0] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 123.836317][ C0] kmalloc_reserve+0xef/0x2c0 [ 123.838247][ C0] __alloc_skb+0x164/0x380 [ 123.839958][ C0] inet6_rt_notify+0xf0/0x2c0 [ 123.841851][ C0] fib6_add+0x2503/0x4ba0 [ 123.843486][ C0] ip6_ins_rt+0xb6/0x110 [ 123.845102][ C0] __ipv6_ifa_notify+0x9de/0xc30 [ 123.846700][ C0] add_addr+0x23e/0x350 [ 123.847976][ C0] add_v4_addrs+0x71a/0xa00 [ 123.849392][ C0] page last free pid 44 tgid 44 stack trace: [ 123.851215][ C0] free_unref_page+0x64a/0xe40 [ 123.852895][ C0] __folio_put+0x31c/0x3e0 [ 123.854525][ C0] migrate_folio_done+0x271/0x310 [ 123.856602][ C0] migrate_pages_batch+0x1bc7/0x2fe0 [ 123.858433][ C0] migrate_pages+0x1b66/0x27a0 [ 123.860072][ C0] compact_zone+0x1f68/0x4280 [ 123.861718][ C0] compact_node+0x1a2/0x2d0 [ 123.863242][ C0] kcompactd+0x76e/0xde0 [ 123.864888][ C0] kthread+0x2c1/0x3a0 [ 123.866710][ C0] ret_from_fork+0x45/0x80 [ 123.868706][ C0] ret_from_fork_asm+0x1a/0x30 [ 123.870615][ C0] [ 123.871597][ C0] Memory state around the buggy address: [ 123.873807][ C0] ffff88801566ff80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 123.877126][ C0] ffff888015670000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.880336][ C0] >ffff888015670080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.883615][ C0] ^ [ 123.885546][ C0] ffff888015670100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.888321][ C0] ffff888015670180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.891598][ C0] ================================================================== [ 123.894584][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.897210][ C0] CPU: 0 UID: 0 PID: 6697 Comm: syz.2.390 Not tainted 6.11.0-rc2-syzkaller #0 [ 123.900722][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.904911][ C0] Call Trace: [ 123.906411][ C0] [ 123.907694][ C0] dump_stack_lvl+0x3d/0x1f0 [ 123.909592][ C0] panic+0x6f5/0x7a0 [ 123.911252][ C0] ? __pfx_panic+0x10/0x10 [ 123.914396][ C0] ? rcu_is_watching+0x12/0xc0 [ 123.916548][ C0] ? __pfx_lock_release+0x10/0x10 [ 123.918826][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 123.921138][ C0] check_panic_on_warn+0xab/0xb0 [ 123.923367][ C0] end_report+0x117/0x180 [ 123.925199][ C0] kasan_report+0xe9/0x110 [ 123.926990][ C0] ? register_lock_class+0x101f/0x1230 [ 123.929243][ C0] ? register_lock_class+0x101f/0x1230 [ 123.931517][ C0] register_lock_class+0x101f/0x1230 [ 123.933678][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 123.936168][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 123.938614][ C0] __lock_acquire+0x135/0x3cb0 [ 123.940779][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 123.943141][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 123.945503][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 123.947829][ C0] lock_acquire+0x1b1/0x560 [ 123.949879][ C0] ? __wake_up+0x1c/0x60 [ 123.951809][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 123.954094][ C0] ? find_held_lock+0x2d/0x110 [ 123.956241][ C0] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 123.958723][ C0] ? __pfx_lock_release+0x10/0x10 [ 123.960992][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 123.963330][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 123.965672][ C0] ? __wake_up+0x1c/0x60 [ 123.967580][ C0] __wake_up+0x1c/0x60 [ 123.969427][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 123.971898][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 123.974298][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 123.976535][ C0] dummy_timer+0x13c2/0x3500 [ 123.978633][ C0] ? __pfx_lock_release+0x10/0x10 [ 123.980902][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 123.983131][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 123.985443][ C0] ? find_held_lock+0x2d/0x110 [ 123.987595][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.989825][ C0] ? timerqueue_del+0x83/0x150 [ 123.991992][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.994223][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 123.996557][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 123.999101][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 124.001851][ C0] hrtimer_interrupt+0x31b/0x800 [ 124.004086][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 124.006729][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 124.009225][ C0] [ 124.010577][ C0] [ 124.011916][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.014505][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 124.017026][ C0] Code: df 55 65 48 8b 2d a4 3a fc 74 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 8f fa 53 f6 e8 6a c9 8a f6 fb bf 01 00 00 00 4f a3 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 bd 9e 53 [ 124.025575][ C0] RSP: 0000:ffffc9000e88fe68 EFLAGS: 00000206 [ 124.028261][ C0] RAX: 00000000000053a5 RBX: ffffed10047da488 RCX: 1ffffffff2021ad9 [ 124.031799][ C0] RDX: 0000000000000000 RSI: ffffffff8b4ccfc0 RDI: 0000000000000001 [ 124.035188][ C0] RBP: ffff888023ed2440 R08: 0000000000000001 R09: 0000000000000001 [ 124.038572][ C0] R10: ffffffff90111b1f R11: 0000000000000000 R12: 0000000000000000 [ 124.042000][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.045524][ C0] ? preempt_schedule_irq+0x46/0x90 [ 124.047850][ C0] irqentry_exit+0x36/0x90 [ 124.049867][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 124.052303][ C0] RIP: 0010:irqentry_exit_to_user_mode+0x120/0x280 [ 124.055194][ C0] Code: 9c 58 fa f6 c4 02 0f 85 18 01 00 00 e8 69 0e 00 00 48 8b 5d 00 f7 c3 0e 30 02 00 0f 84 2b ff ff ff e8 b4 23 8c f6 fb f6 c3 08 <75> bd f6 c7 10 74 c2 4c 89 e7 e8 01 72 b6 f6 f7 c3 04 00 02 00 74 [ 124.063453][ C0] RSP: 0000:ffffc9000e88ff38 EFLAGS: 00000202 [ 124.066078][ C0] RAX: 00000000000053a3 RBX: 0000000020000008 RCX: 1ffffffff2021ad9 [ 124.069547][ C0] RDX: 0000000000000000 RSI: ffffffff8b4ccfc0 RDI: ffffffff8bb041e0 [ 124.072849][ C0] RBP: ffff888023ed2440 R08: 0000000000000001 R09: 0000000000000001 [ 124.076358][ C0] R10: ffffffff90111b1f R11: ffff88802c128a40 R12: ffffc9000e88ff58 [ 124.079899][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.083292][ C0] ? irqentry_exit_to_user_mode+0x11c/0x280 [ 124.085739][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 124.088264][ C0] RIP: 0023:0xf71cd592 [ 124.089910][ C0] Code: 8b 45 08 8b 4d 0c 83 c5 08 89 ce 39 d0 19 fe 72 ef 89 44 24 0c 8b 44 24 10 89 4c 24 10 8b 74 24 14 83 e8 08 89 f9 39 f2 19 d9 <73> 15 8d 74 26 00 8b 70 f8 8b 58 fc 83 e8 08 89 f9 39 f2 19 d9 72 [ 124.097756][ C0] RSP: 002b:00000000ffd5d2e0 EFLAGS: 00000246 [ 124.100158][ C0] RAX: 00000000f69ecdd0 RBX: 00000000ffffffff RCX: 0000000000000000 [ 124.103649][ C0] RDX: 0000000081393acc RSI: 0000000081393acc RDI: 00000000ffffffff [ 124.107198][ C0] RBP: 00000000f69eccb0 R08: 0000000000000000 R09: 0000000000000000 [ 124.110725][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 124.114245][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.117774][ C0] [ 125.203037][ C0] Shutting down cpus with NMI [ 125.205497][ C0] Kernel Offset: disabled [ 125.207179][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:22:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa58f5 RDI=ffffffff9511c340 RBP=ffffffff9511c300 RSP=ffffc900000072e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000031 R14=ffffffff84fa5890 R15=0000000000000000 RIP=ffffffff84fa591f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d0f5ff8 CR3=000000001c398000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001eb9a9 RBX=0000000000000001 RCX=ffffffff8b064c09 RDX=0000000000000000 RSI=ffffffff8b4ccfc0 RDI=ffffffff8bb041e0 RBP=ffffed1002cf8910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000000 R12=0000000000000001 R13=ffff8880167c4880 R14=ffffffff90111b18 R15=0000000000000000 RIP=ffffffff8b065fff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020b2a000 CR3=0000000061cde000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888020330b2a RCX=0000000000000001 RDX=1ffff11004066165 RSI=000000009f48fe79 RDI=ffffffff945b74e8 RBP=ffffffff945f86d8 RSP=ffffc90003c4ed08 R8 =0000000000000000 R9 =fffffbfff28b6ad8 R10=ffffffff945b56c7 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888020330b08 R14=0000000000000003 R15=ffff888020330000 RIP=ffffffff81691352 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f489888fd00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005573de122000 CR3=000000002189c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=31eaa3b331eaa3b3 31eaa3b331eaa3b3 31eaa3b331eaa3b3 31eaa3b331eaa3b3 31eaa3b331eaa3b3 31eaa3b331eaa3b3 31eaa3b331eaa3b3 31eaa3b331eaa3b3 ZMM22=6439406b6439406b 6439406b6439406b 6439406b6439406b 6439406b6439406b 6439406b6439406b 6439406b6439406b 6439406b6439406b 6439406b6439406b ZMM23=7c8e88cf7c8e88cf 7c8e88cf7c8e88cf 7c8e88cf7c8e88cf 7c8e88cf7c8e88cf 7c8e88cf7c8e88cf 7c8e88cf7c8e88cf 7c8e88cf7c8e88cf 7c8e88cf7c8e88cf ZMM24=0f8fa6840f8fa684 0f8fa6840f8fa684 0f8fa6840f8fa684 0f8fa6840f8fa684 0f8fa6840f8fa684 0f8fa6840f8fa684 0f8fa6840f8fa684 0f8fa6840f8fa684 ZMM25=3b5f5a023b5f5a02 3b5f5a023b5f5a02 3b5f5a023b5f5a02 3b5f5a023b5f5a02 3b5f5a023b5f5a02 3b5f5a023b5f5a02 3b5f5a023b5f5a02 3b5f5a023b5f5a02 ZMM26=ef5914b1ef5914b1 ef5914b1ef5914b1 ef5914b1ef5914b1 ef5914b1ef5914b1 ef5914b1ef5914b1 ef5914b1ef5914b1 ef5914b1ef5914b1 ef5914b1ef5914b1 ZMM27=445e849e445e849e 445e849e445e849e 445e849e445e849e 445e849e445e849e 445e849e445e849e 445e849e445e849e 445e849e445e849e 445e849e445e849e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a4080000a4080000 a4080000a4080000 a4080000a4080000 a4080000a4080000 a4080000a4080000 a4080000a4080000 a4080000a4080000 a4080000a4080000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88802c046580 RCX=ffffffff817ef8bb RDX=ffff88801b7e0000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90001f6f060 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005808cb1 R13=0000000000000001 R14=ffff88802c046588 R15=ffff88802c33ffc0 RIP=ffffffff818b23f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002073c000 CR3=00000000270c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000006060600 Opmask01=0000000000000fff Opmask02=000000003f3fefff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf4513550 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ae1a5eef01 00006364755f796d 6d756400454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ae1a5eef01 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055931a5ed201 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6364755f796d6d 75642f6364752f31 2e6364755f796d6d 75642f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004e4f49544341 0000000000000021 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 034fd2f649331ac6 000055ab691d475c 00000000000000c1 5b00003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382432273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000