last executing test programs: 4.911042711s ago: executing program 2 (id=271): getpid() syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) rt_sigpending(0x0, 0x1000000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r4}) close_range(r1, 0xffffffffffffffff, 0x0) 4.488494974s ago: executing program 3 (id=277): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.478580564s ago: executing program 3 (id=278): getpid() syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) rt_sigpending(0x0, 0x1000000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 3.361593144s ago: executing program 0 (id=281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) recvmsg$kcm(r5, &(0x7f0000000900)={&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x5, &(0x7f0000000840)=""/166, 0xa6}, 0x40000100) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000304000000000000000000000300", @ANYRES32, @ANYBLOB="0000000000000000050021000800000070ae8f1cc5a9a8f8a35e65825bc0fd6da19c8b13df43531ff9c3f9549249f6ecf2954f7751375d31f21e0dd52f9eb7d76e57bc526c8c65c9bf3f56d38d30367bcbce1cf3751d08861eced371fe"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002"], 0xa0}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x4b, 0x54, 0x8}) ioctl$FS_IOC_SETFLAGS(r8, 0x801c581f, &(0x7f0000000140)) recvmmsg(r4, &(0x7f0000002680)=[{{&(0x7f00000002c0)=@ax25={{0x3, @netrom}, [@netrom, @default, @bcast, @bcast, @default, @null, @bcast, @bcast]}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$VIDIOC_S_TUNER(r8, 0x4054561e, &(0x7f0000000480)={0xfffffff7, "af233b277d0c82d663814b58c89b159c8f723f50b816cc6452c5e3a23e31523d", 0x2, 0x400, 0x3, 0x707, 0x1, 0x2, 0x6, 0x4}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000002700)=ANY=[@ANYBLOB="8c110000", @ANYRES16=0x0, @ANYBLOB="20cf2565000000080003afae00e4ff070000e022e7291d3d14", @ANYRES32=r9, @ANYBLOB="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"], 0x118c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'L-', 0x3}, 0x16, 0x2) 2.991298599s ago: executing program 2 (id=282): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (fail_nth: 1) 2.820480902s ago: executing program 2 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) 2.76123971s ago: executing program 2 (id=284): mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4020aed2, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000001080)='./file0\x00') r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r4, &(0x7f0000000000)='fd/3\x00') ioctl$CDROMREADAUDIO(r3, 0x530e, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.531250932s ago: executing program 1 (id=285): unshare(0x40400) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0xa134, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x44, &(0x7f0000000480)=""/68, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0x6ef9, 0xfffffff9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0x6, 0xc}, {0x3, 0x3, 0xa, 0xc}]}, 0x90) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5, '\x00', r0, 0x0, 0x2, 0x3}, 0x48) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87031c0000001f00000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async, rerun: 32) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000021c0)=@filter={'filter\x00', 0x4, 0x4, 0x1354, 0xffffffff, 0x0, 0x11c4, 0xc8, 0xfeffffff, 0xffffffff, 0x128c, 0x128c, 0x128c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10d4, 0x10fc, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x13b0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xffb6, &(0x7f0000000380)=""/153, 0x0, 0x26, '\x00', 0x0, 0xa, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x1}, 0x4c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x541b, 0x0) (async, rerun: 64) getsockopt$inet_tcp_buf(r4, 0x6, 0x82d7de0525a149c3, 0x0, &(0x7f0000000080)) (rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREAD(r5, 0x0, 0x260) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.530787431s ago: executing program 3 (id=286): r0 = socket(0xa, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0xfc00, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) sendto$l2tp6(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x20) 2.458767624s ago: executing program 0 (id=287): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380f2fe008008000340000000000b801000018000000100667764000000028000000340000000000000024000000000000003400000000000000340000000000000024000000000000002400000000000000140000000000000014000000000140000"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x6, 0x6, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=r8, @ANYBLOB="080005000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x28) r9 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r9, &(0x7f0000000300)="e229fc04553d512e813124f99b80d5326782df004e2e54705982f0cb77cbbd52fceda2a7fedf3595e4ab7737f1e7fde3c3892bf4f107e2131e94fd9810ed68f7c9c22efc8c8cfa17fe00336361fee07d9d50c4c13b5e5bfba541a8d0ce278affdcd0625e649d17829a2d5a63131de996e92909871f6b01ec1b1a04375b96e2ce5b9100f6ff0000000000000000000000000087941817a3496c400d95b24a55f53551c1699ec7868f36f10fa2c68a03592e3c4a48f8a21715120bf6f4126e3747d1359e39cf6e095718ef36e2f61dbad20f8b3d4ee9cf4b55a1487835021d520ab85ef59b60580b4ed75e727bd76f47ab6bb2e631e1a1a45ab2d0db275cc3633f12aa7ce126c318616bb54f9bae2e2311daad7b254448e552bda71cdc3aa6fe18537822d6fc30114d83bfd5d6aa027f0a146206ceead6d5b347619419d5881ee325672b7476afcdfade51b9ae568b40c2fc91a52d29c7e5e596610cb36edc8116000dd8a93a9551f7d7d2d62a56939938a171c1ed960f59a6e013e557fad71b3b8986d14dbaf649f5340f75ffa296eec9d8b788623901aca301c07124efee955f1a7cde6c8931b13b3eb3ec", 0xffffff6d, 0x4048041, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1102c8000000b30e00000000070000010009"], 0x14) socket$key(0xf, 0x3, 0x2) 2.457983516s ago: executing program 3 (id=288): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x80005, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000440)={r5, 0x1, 0x6, @remote}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xb121, 0x5, 0xffff, 0x0, 0x1, 0x200, '\x00', r5, r1, 0x5, 0x0, 0x5, 0xa}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0xc}, {0xffe6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.45375593s ago: executing program 1 (id=289): r0 = socket(0xa, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0xfc00, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) syz_open_dev$evdev(0x0, 0x0, 0x80802) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd2d) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x3, 0x7, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff}) open(0x0, 0xca942, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0xffffffffffffffff, &(0x7f0000008400)=[{&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x4c) prlimit64(0x0, 0x8, &(0x7f0000000440)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="000024e79896faf3affe0813772649c469e0adc37268f6bf79302fc8c30bbbe4", @ANYBLOB="691c1242b57118de92878d0cc9ff0725e7849cdf81aa62e5f3f77f6a390ce081b7726bbcb8a544449225f5fe092c9d04bd223b952a7f30c041"]) 2.337959694s ago: executing program 3 (id=290): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x6, 0x6, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32, @ANYBLOB="080005000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x28) r8 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r8, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1102c8000000b30e00000000070000010009"], 0x14) socket$key(0xf, 0x3, 0x2) 2.333977957s ago: executing program 1 (id=291): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) 2.258248516s ago: executing program 1 (id=292): socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000f0f801000800000000"], 0x10}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x45, 0x25, ""/37}, 0x0, 0x1) lsm_set_self_attr(0x64, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xc7, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "4ae202931abad88f0000000000000000008800"}) ioctl$TCXONC(r6, 0x540a, 0x2) ioperm(0x4, 0x3d, 0x2) openat$apparmor_thread_exec(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x7, 0x0, [0x1, 0x0, 0x0, 0x13f9, 0x101], [0x7fff, 0x2, 0x6, 0x5bd9, 0x800, 0x0, 0x1, 0x8, 0x7, 0x8, 0x1, 0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0xb, 0x2, 0x2, 0x5e2, 0x7f, 0x3, 0x7, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x4, 0x8000000000000000, 0x10000, 0x10000, 0x6, 0x0, 0x0, 0x4a61fc2, 0x0, 0xe26, 0x7, 0x2, 0x2, 0x6, 0x0, 0x2, 0xfffffffffffffff3, 0x1, 0x0, 0x9, 0x101, 0x3, 0x5, 0x5, 0x4, 0x6, 0x735, 0x10, 0x45, 0xe, 0x5, 0xfffffffffffffffd, 0x7fffffff, 0x6, 0x8, 0x8, 0xc91, 0x4, 0x8000000000000001, 0x9, 0xffffffffffff6ef0, 0x100000000, 0x7fffffffffffffff, 0x16, 0x3, 0x7, 0x1, 0x9, 0x8000000000000001, 0x100000000, 0x2, 0x4, 0xf6f, 0x200, 0x44, 0x8, 0x200, 0x8000000000000001, 0x7fffffff, 0x3ff, 0x0, 0x5, 0x4509, 0x9, 0x81, 0x4000000000000, 0x5, 0xd, 0x7fff, 0x0, 0x2, 0x6b, 0x2, 0x7fffffffffffffff, 0x6, 0x2461, 0x8, 0x83, 0x800, 0x0, 0x8000000000000000, 0x44, 0x7, 0x1, 0xfffffffffffffffc, 0x7b2, 0x8ef2, 0x0, 0xfffffffffffffffb, 0xdd, 0x8]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 2.010677791s ago: executing program 2 (id=293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000001c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x3a, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmmsg(r0, &(0x7f0000003980)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x7f, 0x0, "e63ac224c6a8d4525796627718affb6cea99f50f13573275fc2b371f2adf24a6352ae9bc69dff9c5fe4d38b4e1b0ca036c958ee9e9024fdbc4be3f70e1776b", 0xf}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)="446478c757ded43e2dbfe53f7f2436f345a11366d17aef7bb6405c24dbdc2505e8029e81b1568abe89d4f1ffe750a41db7de9f6422aba48e3f85986025440f43d5d6089dc84016b4148f30d69399504d82303739347bb6af10832bf8d65d60f46577b1dfaf0317bb66bcdd3c6df91d2c2422b27b70d6343a21", 0x79}, {&(0x7f0000000780)="e1f1da89d0e754283c15ac0e868329979f84157b9d9122380eafc9b0cb1be80c1ea3a37ee2fb7a4a27a4c82f43b0cae1c454987252e7b201dbe2ff6916ebc46b86b2b48cf927f93609b96638a055d582", 0x50}, {&(0x7f0000000800)="24c2b48fe0edb26ad46c5aed7a0418df7f9e429b1f95b042be35c4828788072b1ca18c25aa5182b1e304bec8b36b4b69a8eeb43402a02b977b25f337091fb20670634faf9c6ffe02e00cf9930783f685e0fd55e56d02c66d51ada8b965ad4d2aed4b0df0ec3673a541ea2fba6b088471072f9c848488efd688527ee308bb7f1a44b1178d535113cf537fefd50d65bfaa2c970ae507572a2175991e154a5773924c87", 0xa2}, {&(0x7f00000003c0)="7af8f20347591c7b04554bcac3994fa7809974262e83b09f117ac1be8e4e95792ddeb2de0d8c89e2ac7f715ff0ebcf176d54b40609d0f8079d", 0x39}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="b8411f7ab2474641fee6f1de81514a836bd4ea8679dde04392347eb8cbc144c1b82ef82961f633797470627f5e5ffa717cee2d25c2faa715965327db165828da091d6072df9f127b1f0cebc3850e6cb9121b6efd3ce1d212cef1f68640559927cdd72a260e6a4c48e4f402f30558c97b76802114b96edf499497f03a78536ec2e0", 0x81}, {&(0x7f0000001980)="b95050804b001904c1e582e8af3f25842b46ef590847e86bac787ddda98e9a1f1c5c14eaf88071ac2aa231100a521aeb647300abbe3248c3484e601f06822a9b1154f639544b6b7e1a4b04138d196d622f3a355a2f4a6ca5174d273db3d9d1fc47dd392b930b5f1cdb8c35373315bfc082d31c33368525f477c547d46677b0d98909e1a3995479dadce474ebda2984018511757e3ecfff28a8d038fedfcb1aff44fe9f2ea6eacf25612d8b0fa64fcef40a0c766bf055d867198cca70", 0xbc}, {&(0x7f0000001b40)="c87011eb2c923cf7909cb7fad49a1f43c7b81314ebc2c87923940e6202cb903bd2585b8e8f318b87142c1c4a02750c992a15a797afb6b6fa7e8bd9d8f5ae6970b83ddf261f4728f2fed5974503f091c121516678922d1baa595e14d17a36fc244ae4f0dda07736d6e3deaa3c72b597c81801a022fb329a0fd5be5e8db8ed0bd1119cf0b70afa3719ac12cb9ab607741d65ea449ed3a536c0e1b8d24fd0ca436693", 0xa1}], 0x8, &(0x7f0000001cc0)=[{0x74, 0x110, 0xd475, "9df1739ba5bcd26a0cc57b1217b51db9646efbd0fbbc64ff1ea484e2b13391439d18c8975399f28e8ff67abde90fe410d51757d67d47eea2e1a88a53a5b1c980c3aeaf19adce17668f3600d8d9c289e7e71154f91a4f4c678a08b7f905c94319c3a7ffe24d88446d"}, {0x84, 0x102, 0x7, "cf30d49d70726455b32a1612702f3f7772ddf65cb2e1d427b78c6f0aab826798c3011560e59425ef37f3d95135deaecda67ab15a3087a744728a886ef3603974c0c56ee53645b7d8671c43ca68117554f58a56ed0d661efa9f553f1246c9bdfd92d1181d0cdd33778fe9e13c6bf70e3a7cb9d79ac6"}, {0xdc, 0x29, 0x2, "2760461ac67d95d068bd77fc143e5deb9e3578d3cf4f564adf6adacca16950e1cfc7ba8a861c06eb70460c4b6c953dc9c2be15de10799a298fc7971527c98758204732cf5452b49e6e5bd2ec7e7e1bd45edc084686f92e721352c287cbfc4ccc420d49bcd65f32a92ad8db7b34193636e27a3994e0f16047a1e065c7afb4a7d339d428ba00c58bf2ed1dd3d2b34ec5b997e8e7b15b352cced7bf247472fad0b2453552eb42135faecbb98c54aef77432ee16bdf7954adbe9b57eb3292b8c183d5fb8908150cfcf3671601fb3f6"}, {0xc, 0x103, 0x1}, {0x9c, 0x1, 0x0, "3a92bae10b4f907e747ecc0e6270d40094c24e72d9ff72cced039b2d439f9fe1b7257846927fbe07c1fb3e3dcd5a21e2f88a10ac7aa09dd797dbcd770092a1d5f0c360f2dea5867b2f46fe7c542d8dc3cf4b2c5052493fd4596c20fb0a7f8747c21d26fe99d2ec86dc59ba4e6f9c2128a0d594e0408ddf6cb5514355da0ab84d64f747c160b6dd1e78f18b94bc"}, {0xfec, 0x0, 0x2, "9022bdffcd1947e99cc5d3d19a7c89a13c21d40b1a6db1bbcc5c62815892c26fbaa7a9af6c30ef01b0cc7b4d98533ee30ed40196eb53904e3ed483a90f837832f9fcb1c351ab0089c27ddbd82b7ad96be0452680506bd6303a4f046adce9f8bcc32b46bea217c30e23acd1b4898b8d9b473546ca972e691506d4bb49a9a364b848fcd6ed56954029534961bdcdacecf04a08d7fa094ce626dae6978c9855068a040ec7814b1716f7412a333b85561bd2f0ce12b0f1392681c7510b01d2446c3630d71a38507ce88e885b3e1a6e251cf2221f25b8e4f131e37ceeebfebdbe475f81ac0cff84c188643cff846099cce28e642984316c97024e9840e1fd4013df09ab902eea4d4d6ad71fc94bc05b9d2bbb685b599f16a2770f5d6f47934cf1186ce9ae9a137a60385f99202de5b542e07aef0f6c5382246ff7117e53e0f5d81c62c828e08fecb3a5602aaec98d7ac5db2630335ce4d5f690edf677d38df9bc41a54a6209a524a51a39f3676884e682e6a2d3a17f59a1c79418fa8762e887748b2720234aff940533613af0f982c9e4d61f9be5ed3cd319da2733c3b7639a244fd42a2d24cbfd6a38dee06558a7b9b3afe1eff3e923bad31fbcdd856eb27db408144ef8a72b3bf6c761138132165063c2e1b4fce57ca8257d7c50d6cd181ae0f209f5be4c695784d3e808f5347e7e7cc5095abfeada5aa6a480ef4cacfe0037a4796a32a184c30d6df311f832c0a2c68f0f50a90d8218da103a224c1a9d099a7185278857631f9dea3a2d846ee1663878f4c5a4fd09b09c89d8342e016d7395af96cc3265475e3b71d4ee5840b496d3f6955453bd9c7873049f7579aa470540dc6b49ee332afd1ce02cb3c9486e09835d7dc61e6d2312d561e69556e8c016a8f2a1497d51ec8990c844e475d4fa3bc5579afb22b9355225547235bd9908064117cf1c4da93fe7d4a29ca40e9be2de738f301950ad7437d39b732ee5d03590b170720d35b18c3b7de24268ae3af73d0b504f4a95c33f59a50bcd35cfcbdbb9b51b0bdd8be93c12e84ed0c5b2949bc407d13d12cdb855b63eabadcfa081cdd38406c918214135f1719de6ab238831551c0a95477ce293beea8f34441df905040ffdbfe66ae15dff00689895616788c3268d93a44d413c555080662818822b9fad97f9a0d2a481cb3801c5d8b98e9b3a552314c05064d1de60890a15d05680c775dda226833e0aeae24a2368c03905e431fb45c7a28e4acc752c3d9cfa5c945f21ef472b6132e8834b34fa07c23c9e03f723e1b0b6d0d310f987dac33855cad2582820c3dbb1a6e9f8867f21ff4b14cee168470378317e3677c29813789b959e1f19da9223f6d21a510d8fda9669b6b8775444138d8f5353cf96ddcacb96c16cc9327173949457458d0746be2f5295c090d4b7f0cbc7bd55ec1081947c162ebf14dcfc6a3698b5c0ee1d8b1328473b818266f6bc0245fb09112e7a6c19d505e65d30598defa71e8a854ba2b577344968c7f0b1bccce78a827c7db96f62798269b62f8351f1b699c02839895c5d9700a764b6f1b98aacff2870b9f01285b88ed3decf8e4661d527df4b549b024890f84756852d4b330657e5fa1d6d70835e43a055b723ce1e06ade8b6af59c10adcc3cdd815b5ec286ae2840d2469280830af33b38def1416fd2f0f82ce763303eceb9ec9ed7c7481782a19ed97fbf9cb465154ab4db13537a22f9b16a475625be6a419fc9de0f8004609a77b37a2e5c357805eaa199ec1657919e31c137b529ec5d186c4642e942dcae67c99ff3c04583858d7d75ff004990baf91f888b5902f5ff4a24f44f54c18abcf895c614b71e35dd8edf1f5742c6e8e8079ec539728a610131037ad7bee502e01c4955381718153edfe83d2ce3da608f973d14d436b03fd3e893af3425109476dd76bd6082ade2a6b85ae2ece13fac09e70c55664139ab60dabdd73170a29f493126f7f99b9fb4d950744166b972d9105584d92b2ced70c22692ee85c700f5a5cfd691dd77244357b7064d2b58791aa361b85d3fd22b7a36a0557c74e3f78e8db90998ce4468983b4617b6b1400b28c620d6411ffbc33d12a8350f01454c3816fa4c7544070bff046c50844c9412ae9ca54dc753e6522615b77818cca55923889136af7d7b3a8699829aee4270945d4b4df0319203b4f6d063a401e63693617412654919c2e2bc5fe13bb29d71943ebc52196eb3ce2db99154f41360901bbc1e2500fc91e62bf687cdc43a9200f82a8748ecbdc11b0c417147dd33bc39904635de58452e1c08132bd5265365e79e9bf075bf5f7ea317119acedeca4ebd059f6caaf9f40c27de9a09d6adc360107b2477e185d113510ed45b65cf7f6d2387fb81482d5060214485975d899b13a4d27a81b8536f279350945dde027568b403490d3a7d476e582da457749d5e50eaf15a0c727e4358f2cd681ca0be6a9b748060a715c2ad181831b76727f3a73be335a7069265321164b4c82bd1edbbd31f2ac0d6dd779459e4796d2940e0570a0e052c2480ce2e12adaa0940861172b58a98270eda176fe12ec82a1c1b288f1549a0b65b258cbc9f3f715d0defbb09c22d85f4c92405838d1ff395bf8c069e0f76e7ad4a4ff648a1cbd2791ef4141713d4eda69250e8e08e06ae91defebddc43f5ca5b3f5566d39e3112076d40c975b837724b94864bd4169ce8e49069de360d1595fda6fb6033669698efcb0d41757245236b30c146cdf83b764db443a2fc6337840782be5cf1972061286e3b0ccdc024494947f875b3f1d586075ca8c0ff6698601d20198fd38898039e7f154bcecf037a4a8b236a77dee8a7a6c880f215241e5d90c62beefdca0598f3de0a06896e3cd8eb76ed2432b935a81c7f322f09145c29ce328f3aa766855eb00d7ebd653b019c82e52e199c627b35d54f683cc2b2b0b35e47d51b376bb45beac2412a29d46171b7a097aac0c39b3e85b96e74079de4cc129a16fb6979ef36094d37a4c33358aa604e80ff63b3ec426c0ba9e25687a83228e482827af4430d7ef572f0a402d7674e6da49e709670fd71e8990366f74c662e9dade50f9234468a49948d3ec628c1b422a7f7f219828d10bd9f37d3867a7fbaa42d7f07d9048ce78591775f26038dc9e5db038b1d9f438cfd949e72b55ec039cef757e46718e710c62b731fac7c37ccb82a0d8c0b67221d652cd8abef4a27f22c11048dc8edbd030c88005f38ac09ded8e38c5f2f1e8b204167a52a3e40a75a93ca5c5bd609da05fa81b787cd27953708afc6a90f8439b6249add1e503c5b99055371628f2fe35285fdc2d84733215a641a72335f9d6bc302c5e8561d0a18884a15d9bc3578635a57a71a4716b8a5a2f011ab454de34c6f4a3d8ebed14884cef11caf12015df592e21d2c97e11fdf31030be273a9bc6d199a1e0205fda39db273ea613db017ddfb51a3a2c5848d413f52a331721f85d9f60650329cb5adc61c0418e099bdec0b9c04c1a65ba86411020b8d0dfd1e87965bd6436dcb54f05ecd2f4cae91bc2f96a0cdb71a46ba279a64b01acb6e71400d877a946180254269dec8185d7422a446fd2ab6924af102a568b372defcc94f3b7146bf847396ccb38c9d35e5138f8036f96b5e25654e7789ff53098e4e215c0126bebb711e202d34c54088835f311312a8cb6069ac11da76e6bc7fdb504b36d6abd37812f6e694d3e77653184c48e88149dd095f4692f5f58f657e5882e1dd94e29c86b03ea34086e8223ab901daac9359de07a2c9b06dcb69ed0aa9018d473334fb2eefef58947e27162e334e3805973f5ab447d6777f6b4e5a2ebb24d8ee9d8769c5bb40aa40afdb464e0cab51558f172dab2375e5501e149d038c948600580745e7283e03da9cf5849df7f2302bf69bded6f770a2bc4ebc71bdcd4512a9918f49c11e119310463812a51a6da2b7da472c07d327a8e6f69c76b01a7706afc5048c628a18c560cd4996328ab7f14636b102ce0eaa772486a95790b0f2a2c30d348df9c0eab41eb158e6aafde557187cc75221cb2d8a57f9ecef5e149ec6632087d5a41c58e649cca2f7b10da43e0839e333e3d75ba2e073bcdb02b2375ac408d2a172338d874a408949b1da3e8ccbe38f64440e7d5638778f87f8d3c8960462c7f4bb15f2f61c06d0cd6e6d38317099c932cdf7272289eed231886182dba3d8aa05431a64e08ff7a55423dae0ad3c48f53e741cd2095fe39fece1935a9eadb4d954bc59f4be6a1f0f213c159df27ba33a24628f095dd31baff17711a1bead3580b9d0ece524307eb2a6d2fb7d6ce0a4f332ec96a29ed45fa8db441729e37cbdd0a76e9488c57f02fab55759d863124bd9d622be328cd662c8c6943f993f97921d047089639ac5e1a5e606327d124973cafba8407b025e737163b2197f3564aff76bb3b1f06ff426b2054cd237330d504b3e67ff0d6b8ba28015d6bdc6e369797092b8677e18567d00e2c01631b791bd6430d6e772051139a392d80ffb8a9de2924ae5523eaa8b0dc8181b5814dbb8bd2e286e5727cd6d02b34098beb86f081c7d4145b4edbbf661652559d4aa6b6ceda5b35499bd5ad61f6d23aca6ccce321ed57beeb2b012903815daa5e36e07320792d0f7761a6289d40c09da3d92d525b09e690451e79dcbfa21ce34b549a755dc9034f1a754548f7ec8d151f7c46bfa780ec8ee3d40e33ebf95e6e7ff788f7283db8bcad489e8d3939ffe31fbdfe8bb1981c0fe60b21d29dbf766ce966fb5262360e40be13c2fd9825363b35b4526b3c8bd9c19b9d39b588696167e1fbc370fabcbff3edb6ae75690ad721fc3d8e70811ecadc880b47e28c548c2908ebf1d1a2a7c4e9162de92aeffd4a1a3b2c8f4c4c64b5df1b19b90b67a205e90bd6704075544b40602ec969477fd263caa1e880c3082d244b73d719a100a745e3cecb098eb506118a157de2fa34c67e7913f7e743f9f27e6e22107ab6f592efddb3388a1c183198a5c08f89a2fc01ebe6e796269f9fc4df6ea6c36696a916a77027f137efee35c602b74618cae3baa2fc790ed7fffe1d35f6697d45c34d2fcbc32a4f0a4ffa682d5b03690d6de9c877a428e26444bd897e5cf82f407e2b4dc03cfee5b8bf54df44ff7be8528c9cd6e7860551cfab6dd41c0f1156c9e9c29366f30b835cba6fbaa32bc48b7faf161da2da7f328e4e0532a83c7a0d9ea5145f4cbe826eb22d1e80f5bfb0d8ae0e19bdcf239ce46bf373efcd804fda48454e5dad420d502789fb1f39e7cc3fa1437ddd2680ff2cba3fec0f875f662e0cd567d39f873ed2bd8477eeac15212b9142a25d1222520563a197e18c896b9be4b30960c8e1948c13be870660f58e732314ef2212ef965c17b340c686bc90684065247db76c34a221f98225aa52eb7d9492cab3a192f71772fec3039114de76ad2f1c3858eda330ddb25a3366d0cb16de3b9587f937900e71f7a7b853595c2d6d8fca9326ad849c02dd72cd00e00321cc803ec8f19a6a5140c1a5e424637957a8f4a880223c207aaf98aebdef9154594eb677d8b3e239cb2adda6fe9d773af876780d859d9962775bcc07c1e0f1db0847d8a4f77f0abc0d204a492e6601e082756d8585a7361fef47a201b3aee0424d736d7c8a936294788db262bdbad72181c70aa4e5bf2243702777ffe0fd3d0ddc9716ac88cfdc15ae54db4f5376b75c03b8e5cecc66fd1324a80a6681f7ba72968ae1fd249bf471e0d9777466227aaf9adb"}, {0x10, 0x0, 0x4, "d58d"}, {0xe4, 0x109, 0x9, "a188e045ccd4ce8565ad701a2a89283f5e13e9e5cf6991b57a0e44aa3ba2a2523ba7a46ab77696e539188ba2402ff76be7dba991218baf4b7c9c4bf87aadb6e4b3580f9a1c9be5429cdd31431a2545d459a1e147655f408529c67bc6bb1955861ed9201b86722565347def74cc742a8e2de2e9320e12436d0bac87ef9ab4761dc2bf370b373601e27d9ee5f033fd6c05e87f62a131de2846c03f55d2be2caaa71d784bac81ab76f947524ac8dc725c451327900a12d1a39df002e27e171bfa33014794badbd93fab66a9459869d596ad4eeeba50dd58a440"}], 0x135c}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000003a00)="0a7d2277d9193f63c5e022b6b09fc6ee8b99f881928426a3f503035f6a1326a1c346f3a9057797564bd310f2292118cea814449407285763d20dfa22d34acc925185706f815b823e63639d9e3d92159e79c3ee6a7ba87ca062b324357fee88318f8a189502a1158e584a450d1dcb09c0004cd08fcd5871a0deb2ed27d16fbc62ff807ecbd7cb749526cad4d3dbf4cdec766581e82de8837b2fa177631890ca65396ace2b43cc3792c0a8d531d727a6d8c02f1286c438b6d976721daa40", 0xbd}, {&(0x7f00000032c0)="3d2d26bebeb13521a7f1ab91f6f9843513ae55ac5e6add395ac48c8c5ce972caf44c0d64b9130805aa8cd772f2782cde3db5cfa53026b818bb0462f75bff8cde973690674b4fcc3d293ae071f3eb55d1b7d27ad0e811a16083c9fea3b86f5d6a3dbdbbf20e9bec261e75e7b4feed12f24acd44b61a23a8d345b37f5b2cc42439c53dc247e08b6ba6981d0687f88591a7056ab1ed3acea9306fb4ef54e0efe99a7053cd044913b8447b5a8bb6cd899cf5a99d21cbb4897205be83c4a91e96d415303836ba7189fa407a7456bd6b14f33bdc557cb3a1991ff7bb85ac85967315827c12fd", 0xe3}, {&(0x7f0000001c00)}], 0x3, &(0x7f00000033c0)=[{0x78, 0x120, 0x7, "378ba775dfc24d6fab21ae8f1f9187d550fde5a77fd1117a4cdefe96db03b92fcdc1509d48c12be0c349a92159680f2359c856b373a11f13ca1479ea14680038930e133860209b3f2a90868f4d55e63c076e5106dce8b4c30a6a2a01a9ccd05e3957f0215dbc292b6e"}, {0xe8, 0x1, 0x3, "4f81587268e26ef2787f1357296b0ece54807f3f6fc7c121fef3746610bfc74b13f9d837b289ea52e5708b412baf75595059da0f1c202347ff776b68702c20cf13571f94c59748505af3a71964abf49a386f938cfbd520d348bdba1108e279b6f019b85081dc7b77b642ae3ce02472bb24a3b4c075c50277bca459b5f3b96cf76ff5906039cddd226dae0725fa86a44fd5060bcb33046f662c0fc77ba6c9a0a1876b6240473ded62b3435f183956448d88e28fd9337e7298d59d56a826defdeadc1decff9d8730b427d833fe1cadf46d76d0fc5089bfbcf4dd25"}], 0x160}}, {{&(0x7f0000003580)=@pppoe={0x18, 0x0, {0x2, @remote, 'pimreg\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000003940)=[{0x28, 0x107, 0x1, "7ae25baf3ac0d8d3d502e092e552a85ffaccec6a7a23803474b20d"}], 0x28}}], 0x4, 0x8c1) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="2b639f88707520"], 0x5) openat$cgroup_ro(r6, &(0x7f0000001a80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.330460359s ago: executing program 1 (id=294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r4, 0x1}}, 0x18) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000805000/0x3000)=nil, 0x3000, 0x14) 1.01075317s ago: executing program 2 (id=295): getpid() syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) rt_sigpending(0x0, 0x1000000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 746.461951ms ago: executing program 1 (id=296): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x200008, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000160) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x2, @dev, 0x9}, 0x1c) (async) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{}], 0x1}, 0x0) writev(r2, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r6 = dup3(r4, r3, 0x0) fchdir(r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x301002, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a6d6163766c616e3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) socket$packet(0x11, 0x2, 0x300) 364.524956ms ago: executing program 0 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x39) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}}], 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket(0x18, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x174a, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 207.016624ms ago: executing program 3 (id=298): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000010c0), 0x80800, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x81) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@getspdinfo={0x14, 0x25, 0x524, 0x70bd25, 0x25dfdbfe, 0x9, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x40086607, &(0x7f0000000100)={@desc={0x1, 0x0, @desc1}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_ts_info}) fdatasync(r5) r7 = open(&(0x7f0000000040)='./file0\x00', 0x10002, 0x91) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040025bd7000fcd90100007400000000000c410000000c001473797a310000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40400c5}, 0x20000000) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r10, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000e80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x11dc0, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaf5c520a041c86dd60"], 0x0) 206.537045ms ago: executing program 0 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioperm(0x0, 0x4003, 0x7) modify_ldt$read(0x300, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@ip_ttl={{0x10}}], 0x10}}], 0x2, 0x0) syz_emit_vhci(&(0x7f0000000f00)=ANY=[@ANYBLOB="043e0b06c90006000680"], 0xe) 158.547182ms ago: executing program 0 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x402ad3e3de81d7e7}, 0x18}}, 0x0) 0s ago: executing program 0 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x402ad3e3de81d7e7}, 0x18}}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46174' (ED25519) to the list of known hosts. [ 51.541303][ T5322] cgroup: Unknown subsys name 'net' [ 51.683512][ T5322] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.040284][ T5322] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.006672][ T5347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.011762][ T5347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.015799][ T5348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.016002][ T5347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.020074][ T5348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.022612][ T5347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.025864][ T5348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.031671][ T5353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.035892][ T5348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.040576][ T5353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.040771][ T5348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.047499][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.050817][ T5348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.060015][ T5348] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.063717][ T5348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.068097][ T5348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.072780][ T5350] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.080149][ T5353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.083545][ T5353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.084147][ T5348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.090902][ T5348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.096567][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.104397][ T5348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.109458][ T5348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.433638][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 59.538286][ T5341] chnl_net:caif_netlink_parms(): no params data found [ 59.741081][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.744233][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.747565][ T5349] bridge_slave_0: entered allmulticast mode [ 59.751730][ T5349] bridge_slave_0: entered promiscuous mode [ 59.839731][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.842242][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.845560][ T5349] bridge_slave_1: entered allmulticast mode [ 59.849491][ T5349] bridge_slave_1: entered promiscuous mode [ 59.915872][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.919125][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.922353][ T5341] bridge_slave_0: entered allmulticast mode [ 59.928198][ T5341] bridge_slave_0: entered promiscuous mode [ 59.935604][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.938725][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.941903][ T5341] bridge_slave_1: entered allmulticast mode [ 59.945951][ T5341] bridge_slave_1: entered promiscuous mode [ 59.949784][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 59.964484][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.968419][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 59.979028][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.046868][ T5341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.059009][ T5341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.236969][ T5341] team0: Port device team_slave_0 added [ 60.243386][ T5349] team0: Port device team_slave_0 added [ 60.249710][ T5349] team0: Port device team_slave_1 added [ 60.294361][ T5341] team0: Port device team_slave_1 added [ 60.391960][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.395556][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.398808][ T5343] bridge_slave_0: entered allmulticast mode [ 60.402895][ T5343] bridge_slave_0: entered promiscuous mode [ 60.464695][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.467802][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.479220][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.486770][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.489828][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.501026][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.544568][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.547778][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.550922][ T5343] bridge_slave_1: entered allmulticast mode [ 60.555230][ T5343] bridge_slave_1: entered promiscuous mode [ 60.559239][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.562164][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.573123][ T5341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.637214][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.640178][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.650195][ T5341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.684790][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.687940][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.691143][ T5354] bridge_slave_0: entered allmulticast mode [ 60.695274][ T5354] bridge_slave_0: entered promiscuous mode [ 60.745103][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.748368][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.751556][ T5354] bridge_slave_1: entered allmulticast mode [ 60.755805][ T5354] bridge_slave_1: entered promiscuous mode [ 60.784995][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.792410][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.802298][ T5341] hsr_slave_0: entered promiscuous mode [ 60.806498][ T5341] hsr_slave_1: entered promiscuous mode [ 60.981395][ T5349] hsr_slave_0: entered promiscuous mode [ 60.985117][ T5349] hsr_slave_1: entered promiscuous mode [ 60.988576][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.992528][ T5349] Cannot create hsr debugfs directory [ 61.002142][ T5343] team0: Port device team_slave_0 added [ 61.011706][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.053305][ T5343] team0: Port device team_slave_1 added [ 61.058668][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.113813][ T5348] Bluetooth: hci1: command tx timeout [ 61.116696][ T5348] Bluetooth: hci2: command tx timeout [ 61.118008][ T5347] Bluetooth: hci0: command tx timeout [ 61.193333][ T5347] Bluetooth: hci3: command tx timeout [ 61.203765][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.206839][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.218116][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.282654][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.285929][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.295288][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.303470][ T5354] team0: Port device team_slave_0 added [ 61.318512][ T5354] team0: Port device team_slave_1 added [ 61.436346][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.439231][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.453132][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.463502][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.466232][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.476872][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.531183][ T5343] hsr_slave_0: entered promiscuous mode [ 61.535203][ T5343] hsr_slave_1: entered promiscuous mode [ 61.539586][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.542890][ T5343] Cannot create hsr debugfs directory [ 61.849016][ T5354] hsr_slave_0: entered promiscuous mode [ 61.852392][ T5354] hsr_slave_1: entered promiscuous mode [ 61.862006][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.865224][ T5354] Cannot create hsr debugfs directory [ 62.025595][ T5341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.060402][ T5341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.072222][ T5341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.091340][ T5341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.188860][ T5349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.213533][ T5349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.219885][ T5349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.227455][ T5349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.295490][ T5343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.303215][ T5343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.310174][ T5343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.326284][ T5343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.351395][ T5354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.358573][ T5354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.366332][ T5354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.372413][ T5354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.449414][ T5341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.519641][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.529211][ T5341] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.566781][ T2783] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.569869][ T2783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.577559][ T2783] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.580392][ T2783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.597968][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.638302][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.641405][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.664339][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.667321][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.683419][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.728981][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.747825][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.751062][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.776338][ T5349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.795099][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.798048][ T5385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.822328][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.859834][ T5343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.865910][ T5343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.897156][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.911515][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.915768][ T5385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.935777][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.939481][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.976912][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.001352][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.071520][ T5341] veth0_vlan: entered promiscuous mode [ 63.083022][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.091235][ T5341] veth1_vlan: entered promiscuous mode [ 63.109316][ T5349] veth0_vlan: entered promiscuous mode [ 63.117885][ T5349] veth1_vlan: entered promiscuous mode [ 63.172187][ T5349] veth0_macvtap: entered promiscuous mode [ 63.180742][ T5349] veth1_macvtap: entered promiscuous mode [ 63.185306][ T5343] veth0_vlan: entered promiscuous mode [ 63.194905][ T5347] Bluetooth: hci0: command tx timeout [ 63.195430][ T5353] Bluetooth: hci1: command tx timeout [ 63.197191][ T5348] Bluetooth: hci2: command tx timeout [ 63.205459][ T5341] veth0_macvtap: entered promiscuous mode [ 63.217183][ T5341] veth1_macvtap: entered promiscuous mode [ 63.223395][ T5343] veth1_vlan: entered promiscuous mode [ 63.250422][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.260384][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.267083][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.271474][ T5349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.275595][ T5348] Bluetooth: hci3: command tx timeout [ 63.277381][ T5349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.280347][ T5349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.284686][ T5349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.306163][ T5343] veth0_macvtap: entered promiscuous mode [ 63.312660][ T5343] veth1_macvtap: entered promiscuous mode [ 63.316611][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.321449][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.327869][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.357249][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.361814][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.368326][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.385780][ T5341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.389474][ T5341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.392985][ T5341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.398757][ T5341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.406414][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.410606][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.414764][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.418770][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.425476][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.468009][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.468529][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.472429][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.476104][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.484081][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.488202][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.492946][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.510956][ T5343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.514801][ T5343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.518123][ T5343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.521795][ T5343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.561832][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.562140][ T5354] veth0_vlan: entered promiscuous mode [ 63.564851][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.583936][ T5354] veth1_vlan: entered promiscuous mode [ 63.659747][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.673167][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.744981][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.748553][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.765188][ T5354] veth0_macvtap: entered promiscuous mode [ 63.781620][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.786814][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.793794][ T5354] veth1_macvtap: entered promiscuous mode [ 63.798454][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.802510][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.819150][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.825653][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.830003][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.834544][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.838323][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.842609][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.849149][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.871281][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.880757][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.892118][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.911533][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.920429][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.928442][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.936053][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.942792][ T5354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.947533][ T5354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.951503][ T5354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.956282][ T5354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.049457][ T5416] Zero length message leads to an empty skb [ 64.168992][ T5422] netlink: 9404 bytes leftover after parsing attributes in process `syz.1.7'. [ 64.179840][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.186136][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.264957][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.268550][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.725262][ T5439] overlayfs: workdir and upperdir must be separate subtrees [ 64.773344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 64.964425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 65.057100][ T5443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 65.059631][ T5443] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.097495][ T5443] vhci_hcd vhci_hcd.0: Device attached [ 65.186006][ T5448] x_tables: duplicate underflow at hook 1 [ 65.235517][ T5448] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 65.262111][ T5448] syzkaller1: entered allmulticast mode [ 65.263251][ T5348] Bluetooth: hci1: command tx timeout [ 65.267121][ T5353] Bluetooth: hci2: command tx timeout [ 65.267559][ T5347] Bluetooth: hci0: command tx timeout [ 65.303589][ T5103] vhci_hcd: vhci_device speed not set [ 65.317961][ T5456] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.343860][ T5347] Bluetooth: hci3: command tx timeout [ 65.373652][ T5103] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 65.643122][ T5445] vhci_hcd: connection reset by peer [ 65.646770][ T11] vhci_hcd: stop threads [ 65.651170][ T11] vhci_hcd: release socket [ 65.658850][ T11] vhci_hcd: disconnect device [ 65.746696][ T5471] FAULT_INJECTION: forcing a failure. [ 65.746696][ T5471] name failslab, interval 1, probability 0, space 0, times 1 [ 65.752357][ T5471] CPU: 1 UID: 0 PID: 5471 Comm: syz.0.17 Not tainted 6.11.0-rc1-syzkaller #0 [ 65.756028][ T5471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.760469][ T5471] Call Trace: [ 65.761918][ T5471] [ 65.763214][ T5471] dump_stack_lvl+0x16c/0x1f0 [ 65.765256][ T5471] should_fail_ex+0x497/0x5b0 [ 65.767205][ T5471] ? fs_reclaim_acquire+0xae/0x160 [ 65.769231][ T5471] should_failslab+0xc2/0x120 [ 65.770978][ T5471] __kmalloc_noprof+0xcb/0x410 [ 65.772399][ T5471] iter_file_splice_write+0x1d2/0x10b0 [ 65.774509][ T5471] ? __pfx___lock_acquire+0x10/0x10 [ 65.776605][ T5471] ? __pfx_aa_file_perm+0x10/0x10 [ 65.778768][ T5471] ? __pfx_iter_file_splice_write+0x10/0x10 [ 65.781070][ T5471] ? __pfx_lock_acquire+0x10/0x10 [ 65.783301][ T5471] ? __pfx_iter_file_splice_write+0x10/0x10 [ 65.785925][ T5471] do_splice+0x148c/0x1f90 [ 65.787927][ T5471] ? find_held_lock+0x2d/0x110 [ 65.789823][ T5471] ? __pfx_do_splice+0x10/0x10 [ 65.791821][ T5471] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 65.794024][ T5471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.796695][ T5471] __do_splice+0x327/0x360 [ 65.798216][ T5471] ? __pfx___do_splice+0x10/0x10 [ 65.799876][ T5471] __ia32_sys_splice+0x1d0/0x260 [ 65.801534][ T5471] __do_fast_syscall_32+0x73/0x120 [ 65.803506][ T5471] do_fast_syscall_32+0x32/0x80 [ 65.805664][ T5471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.808006][ T5471] RIP: 0023:0xf7f42579 [ 65.809814][ T5471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.816519][ T5471] RSP: 002b:00000000f56d557c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 65.819696][ T5471] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 65.822486][ T5471] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 00000000000408ce [ 65.825960][ T5471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.829400][ T5471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.832826][ T5471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.836257][ T5471] [ 66.242455][ T5478] syzkaller1: left allmulticast mode [ 66.295139][ T5481] netlink: 'syz.3.19': attribute type 3 has an invalid length. [ 66.298571][ T5481] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.19'. [ 66.314366][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 66.435943][ T5481] fuse: Bad value for 'fd' [ 66.438559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.528847][ T5486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 66.687654][ T5493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24'. [ 66.697173][ T5493] veth1_vlan: entered allmulticast mode [ 66.786693][ T39] audit: type=1326 audit(1722275206.406:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.799408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.807963][ T39] audit: type=1326 audit(1722275206.406:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.822729][ T39] audit: type=1326 audit(1722275206.416:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.833463][ T39] audit: type=1326 audit(1722275206.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.840724][ T39] audit: type=1326 audit(1722275206.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.851196][ T39] audit: type=1326 audit(1722275206.426:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.865934][ T39] audit: type=1326 audit(1722275206.426:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.924502][ T39] audit: type=1326 audit(1722275206.546:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 66.972306][ T5501] Illegal XDP return value 2378036727 on prog (id 8) dev syz_tun, expect packet loss! [ 66.994307][ T39] audit: type=1326 audit(1722275206.616:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.063296][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.091323][ T39] audit: type=1326 audit(1722275206.706:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.1.25" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 67.298398][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.302978][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.310025][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.313932][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.326886][ T5497] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 67.343566][ T5347] Bluetooth: hci0: command tx timeout [ 67.345360][ T5353] Bluetooth: hci2: command tx timeout [ 67.351182][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.354687][ T5353] Bluetooth: hci1: command tx timeout [ 67.355418][ T5506] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 67.433336][ T5353] Bluetooth: hci3: command tx timeout [ 67.576036][ T5497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.580387][ T5497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.687223][ T5381] usb 6-1: USB disconnect, device number 2 [ 67.715817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.072570][ T5524] FAULT_INJECTION: forcing a failure. [ 68.072570][ T5524] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.078683][ T5524] CPU: 3 UID: 0 PID: 5524 Comm: syz.3.32 Not tainted 6.11.0-rc1-syzkaller #0 [ 68.082421][ T5524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.087049][ T5524] Call Trace: [ 68.088543][ T5524] [ 68.089861][ T5524] dump_stack_lvl+0x16c/0x1f0 [ 68.091838][ T5524] should_fail_ex+0x497/0x5b0 [ 68.093932][ T5524] _copy_to_user+0x30/0xc0 [ 68.095831][ T5524] simple_read_from_buffer+0xd0/0x160 [ 68.098055][ T5524] proc_fail_nth_read+0x1b0/0x290 [ 68.100184][ T5524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.102562][ T5524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.104760][ T5524] vfs_read+0x1d4/0xbd0 [ 68.106519][ T5524] ? __fdget_pos+0xeb/0x180 [ 68.108385][ T5524] ? __pfx_vfs_read+0x10/0x10 [ 68.110050][ T5524] ? __pfx___mutex_lock+0x10/0x10 [ 68.112033][ T5524] ? __fget_files+0x256/0x400 [ 68.114125][ T5524] ksys_read+0x12f/0x260 [ 68.116035][ T5524] ? __pfx_ksys_read+0x10/0x10 [ 68.118003][ T5524] __do_fast_syscall_32+0x73/0x120 [ 68.119800][ T5524] do_fast_syscall_32+0x32/0x80 [ 68.121433][ T5524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.124104][ T5524] RIP: 0023:0xf7f90579 [ 68.125604][ T5524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.132805][ T5524] RSP: 002b:00000000f57465b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 68.136565][ T5524] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5746630 [ 68.140049][ T5524] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 68.143500][ T5524] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 68.146728][ T5524] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 68.149527][ T5524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.152465][ T5524] [ 68.281983][ T5527] netlink: 'syz.3.33': attribute type 3 has an invalid length. [ 68.288158][ T5527] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.33'. [ 68.308274][ T5529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34'. [ 68.316935][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 68.517278][ T5527] fuse: Bad value for 'fd' [ 68.584070][ T5353] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 68.651536][ T5534] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.664739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.702043][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 68.705867][ T5353] Bluetooth: Wrong link type (-22) [ 68.708785][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 68.711648][ T5353] Bluetooth: Wrong link type (-22) [ 68.714056][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 68.716759][ T5353] Bluetooth: Wrong link type (-22) [ 68.719095][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 68.722056][ T5353] Bluetooth: Wrong link type (-22) [ 68.724775][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 68.728132][ T5353] Bluetooth: Wrong link type (-22) [ 68.787212][ T5534] input: syz0 as /devices/virtual/input/input7 [ 68.845212][ T5539] FAULT_INJECTION: forcing a failure. [ 68.845212][ T5539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.851252][ T5539] CPU: 0 UID: 0 PID: 5539 Comm: syz.3.36 Not tainted 6.11.0-rc1-syzkaller #0 [ 68.855382][ T5539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.860734][ T5539] Call Trace: [ 68.862236][ T5539] [ 68.863538][ T5539] dump_stack_lvl+0x16c/0x1f0 [ 68.865567][ T5539] should_fail_ex+0x497/0x5b0 [ 68.867644][ T5539] _copy_from_user+0x30/0xf0 [ 68.869990][ T5539] bpf_test_init.isra.0+0xf1/0x150 [ 68.872194][ T5539] bpf_prog_test_run_xdp+0x4f6/0x1530 [ 68.874606][ T5539] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.877367][ T5539] ? fput+0x32/0x390 [ 68.879391][ T5539] ? __bpf_prog_get+0xa0/0x2f0 [ 68.881788][ T5539] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 68.884396][ T5539] __sys_bpf+0x141f/0x5600 [ 68.886465][ T5539] ? __pfx___sys_bpf+0x10/0x10 [ 68.888525][ T5539] ? ksys_write+0x12f/0x260 [ 68.890686][ T5539] ? find_held_lock+0x2d/0x110 [ 68.892837][ T5539] ? ksys_write+0x21c/0x260 [ 68.894840][ T5539] ? __pfx_lock_release+0x10/0x10 [ 68.897960][ T5539] ? vfs_write+0x14d/0x1140 [ 68.900723][ T5539] ? __mutex_unlock_slowpath+0x164/0x650 [ 68.903381][ T5539] ? fput+0x32/0x390 [ 68.905140][ T5539] ? ksys_write+0x1ab/0x260 [ 68.907137][ T5539] ? __pfx_ksys_write+0x10/0x10 [ 68.909614][ T5539] __ia32_sys_bpf+0x76/0xe0 [ 68.912204][ T5539] __do_fast_syscall_32+0x73/0x120 [ 68.914652][ T5539] do_fast_syscall_32+0x32/0x80 [ 68.916842][ T5539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.920242][ T5539] RIP: 0023:0xf7f90579 [ 68.921995][ T5539] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.930424][ T5539] RSP: 002b:00000000f574657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 68.934602][ T5539] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 68.937920][ T5539] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 68.941268][ T5539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.944801][ T5539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.948239][ T5539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.951709][ T5539] [ 69.380221][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 69.384860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.632828][ T5549] FAULT_INJECTION: forcing a failure. [ 69.632828][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 69.638385][ T5549] CPU: 3 UID: 0 PID: 5549 Comm: syz.0.40 Not tainted 6.11.0-rc1-syzkaller #0 [ 69.642026][ T5549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.646925][ T5549] Call Trace: [ 69.648315][ T5549] [ 69.649948][ T5549] dump_stack_lvl+0x16c/0x1f0 [ 69.652291][ T5549] should_fail_ex+0x497/0x5b0 [ 69.654438][ T5549] ? fs_reclaim_acquire+0xae/0x160 [ 69.656758][ T5549] should_failslab+0xc2/0x120 [ 69.658828][ T5549] __kmalloc_noprof+0xcb/0x410 [ 69.660904][ T5549] ? __pfx_lock_acquire+0x10/0x10 [ 69.663105][ T5549] tomoyo_realpath_from_path+0xbf/0x710 [ 69.665467][ T5549] ? tomoyo_profile+0x47/0x60 [ 69.667536][ T5549] tomoyo_path_number_perm+0x245/0x5b0 [ 69.670031][ T5549] ? tomoyo_path_number_perm+0x232/0x5b0 [ 69.677562][ T5549] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.681080][ T5549] ? __pfx_lock_release+0x10/0x10 [ 69.683969][ T5549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.687041][ T5549] ? __fget_files+0x256/0x400 [ 69.689351][ T5549] security_file_ioctl_compat+0x75/0xc0 [ 69.692415][ T5549] __do_compat_sys_ioctl+0x5d/0x330 [ 69.695305][ T5549] __do_fast_syscall_32+0x73/0x120 [ 69.698147][ T5549] do_fast_syscall_32+0x32/0x80 [ 69.700551][ T5549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.703363][ T5549] RIP: 0023:0xf7f42579 [ 69.705445][ T5549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 69.714134][ T5549] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 69.717607][ T5549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008108551b [ 69.720880][ T5549] RDX: 0000000020002600 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.725074][ T5549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.730270][ T5549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 69.734219][ T5549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.737734][ T5549] [ 69.740577][ T5549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.807276][ T5551] netlink: 'syz.0.41': attribute type 21 has an invalid length. [ 69.858416][ T5553] tmpfs: Unknown parameter 'usrquota@' [ 69.923934][ T5555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43'. [ 70.285043][ T5567] netlink: 'syz.3.45': attribute type 3 has an invalid length. [ 70.288416][ T5567] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.45'. [ 70.324178][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 70.464497][ T5103] vhci_hcd: vhci_device speed not set [ 70.473569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 70.478038][ T5353] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 70.540192][ T5567] fuse: Bad value for 'fd' [ 70.543383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.547984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.619272][ T5571] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.635672][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 70.638685][ T5353] Bluetooth: Wrong link type (-22) [ 70.641000][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 70.643997][ T5353] Bluetooth: Wrong link type (-22) [ 70.646676][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 70.649506][ T5353] Bluetooth: Wrong link type (-22) [ 70.651804][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 70.654586][ T5353] Bluetooth: Wrong link type (-22) [ 70.657143][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 70.659947][ T5353] Bluetooth: Wrong link type (-22) [ 70.700129][ T5571] input: syz0 as /devices/virtual/input/input8 [ 71.114519][ T5584] FAULT_INJECTION: forcing a failure. [ 71.114519][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 71.120723][ T5584] CPU: 3 UID: 0 PID: 5584 Comm: syz.0.51 Not tainted 6.11.0-rc1-syzkaller #0 [ 71.124640][ T5584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.129309][ T5584] Call Trace: [ 71.130811][ T5584] [ 71.132110][ T5584] dump_stack_lvl+0x16c/0x1f0 [ 71.134237][ T5584] should_fail_ex+0x497/0x5b0 [ 71.136322][ T5584] ? fs_reclaim_acquire+0xae/0x160 [ 71.138567][ T5584] should_failslab+0xc2/0x120 [ 71.140688][ T5584] __kmalloc_noprof+0xcb/0x410 [ 71.142850][ T5584] ? __pfx___mutex_trylock_common+0x10/0x10 [ 71.145444][ T5584] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 71.148226][ T5584] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 71.150563][ T5584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 71.153603][ T5584] ? security_capable+0x98/0xd0 [ 71.155835][ T5584] genl_rcv_msg+0x565/0x800 [ 71.157900][ T5584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.160151][ T5584] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 71.162708][ T5584] ? __pfx___lock_acquire+0x10/0x10 [ 71.164785][ T5584] netlink_rcv_skb+0x165/0x410 [ 71.166709][ T5584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.168710][ T5584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.170813][ T5584] ? down_read+0xc9/0x330 [ 71.172524][ T5584] ? __pfx_down_read+0x10/0x10 [ 71.174638][ T5584] ? netlink_deliver_tap+0x1ae/0xcf0 [ 71.176993][ T5584] genl_rcv+0x28/0x40 [ 71.178855][ T5584] netlink_unicast+0x544/0x830 [ 71.180948][ T5584] ? __pfx_netlink_unicast+0x10/0x10 [ 71.183400][ T5584] ? __phys_addr_symbol+0x30/0x80 [ 71.185643][ T5584] ? __check_object_size+0x497/0x720 [ 71.188049][ T5584] netlink_sendmsg+0x8b8/0xd70 [ 71.190196][ T5584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.192578][ T5584] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.194980][ T5584] ____sys_sendmsg+0x9b4/0xb50 [ 71.197139][ T5584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.199487][ T5584] ? get_compat_msghdr+0x11b/0x170 [ 71.201790][ T5584] ? __pfx___lock_acquire+0x10/0x10 [ 71.204189][ T5584] ___sys_sendmsg+0x135/0x1e0 [ 71.206301][ T5584] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.208651][ T5584] ? ksys_write+0x21c/0x260 [ 71.210744][ T5584] ? __fget_light+0x173/0x210 [ 71.212856][ T5584] __sys_sendmsg+0x117/0x1f0 [ 71.215012][ T5584] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.217460][ T5584] __do_fast_syscall_32+0x73/0x120 [ 71.219762][ T5584] do_fast_syscall_32+0x32/0x80 [ 71.222104][ T5584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.224897][ T5584] RIP: 0023:0xf7f42579 [ 71.226730][ T5584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.235038][ T5584] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 71.238558][ T5584] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000100 [ 71.242035][ T5584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.245513][ T5584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.248992][ T5584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.252534][ T5584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.256098][ T5584] [ 71.540241][ T5595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.55'. [ 71.763229][ T5602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 71.826891][ T5607] TCP: TCP_TX_DELAY enabled [ 71.980157][ T5610] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.118150][ T5353] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 72.201177][ T5618] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.209555][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 72.212624][ T5353] Bluetooth: Wrong link type (-22) [ 72.215215][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 72.218063][ T5353] Bluetooth: Wrong link type (-22) [ 72.220295][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 72.220757][ T5618] input: syz0 as /devices/virtual/input/input10 [ 72.222812][ T5353] Bluetooth: Wrong link type (-22) [ 72.227987][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 72.230713][ T5353] Bluetooth: Wrong link type (-22) [ 72.233013][ T5353] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 72.236042][ T5353] Bluetooth: Wrong link type (-22) [ 72.792879][ T5622] pim6reg527: entered allmulticast mode [ 73.059793][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 73.209413][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.316943][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.447939][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.518148][ T5347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.522814][ T5347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.530896][ T5347] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.537646][ T5347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.543903][ T5347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.547165][ T5347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.563433][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.827754][ T5647] chnl_net:caif_netlink_parms(): no params data found [ 73.836499][ T11] bridge_slave_1: left allmulticast mode [ 73.839115][ T11] bridge_slave_1: left promiscuous mode [ 73.842352][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.851895][ T11] bridge_slave_0: left allmulticast mode [ 73.855887][ T11] bridge_slave_0: left promiscuous mode [ 73.858453][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.344013][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.359159][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.373011][ T11] bond0 (unregistering): Released all slaves [ 74.534499][ T5663] FAULT_INJECTION: forcing a failure. [ 74.534499][ T5663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.539812][ T5663] CPU: 2 UID: 0 PID: 5663 Comm: syz.3.73 Not tainted 6.11.0-rc1-syzkaller #0 [ 74.543619][ T5663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.548349][ T5663] Call Trace: [ 74.549792][ T5663] [ 74.551054][ T5663] dump_stack_lvl+0x16c/0x1f0 [ 74.553024][ T5663] should_fail_ex+0x497/0x5b0 [ 74.555029][ T5663] _copy_to_user+0x30/0xc0 [ 74.556939][ T5663] simple_read_from_buffer+0xd0/0x160 [ 74.559119][ T5663] proc_fail_nth_read+0x1b0/0x290 [ 74.561044][ T5663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.563377][ T5663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.565730][ T5663] vfs_read+0x1d4/0xbd0 [ 74.567509][ T5663] ? __fdget_pos+0xeb/0x180 [ 74.569336][ T5663] ? __pfx_vfs_read+0x10/0x10 [ 74.571215][ T5663] ? __pfx___mutex_lock+0x10/0x10 [ 74.573395][ T5663] ? __fget_files+0x256/0x400 [ 74.575453][ T5663] ksys_read+0x12f/0x260 [ 74.577209][ T5663] ? __pfx_ksys_read+0x10/0x10 [ 74.579155][ T5663] __do_fast_syscall_32+0x73/0x120 [ 74.581042][ T5663] do_fast_syscall_32+0x32/0x80 [ 74.582761][ T5663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.585296][ T5663] RIP: 0023:0xf7f90579 [ 74.586859][ T5663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 74.594805][ T5663] RSP: 002b:00000000f57465b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 74.598222][ T5663] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5746630 [ 74.601513][ T5663] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 74.604853][ T5663] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 74.608134][ T5663] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.611443][ T5663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.615089][ T5663] [ 74.681127][ T5347] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 74.783190][ T5667] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.784372][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.788629][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 74.790777][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.794008][ T5347] Bluetooth: Wrong link type (-22) [ 74.799592][ T5667] input: syz0 as /devices/virtual/input/input11 [ 74.801994][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 74.802008][ T5347] Bluetooth: Wrong link type (-22) [ 74.802042][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 74.802052][ T5347] Bluetooth: Wrong link type (-22) [ 74.802085][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 74.802095][ T5347] Bluetooth: Wrong link type (-22) [ 74.802126][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 74.802136][ T5347] Bluetooth: Wrong link type (-22) [ 74.804297][ T5647] bridge_slave_0: entered allmulticast mode [ 74.855234][ T5647] bridge_slave_0: entered promiscuous mode [ 74.859947][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.863804][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.867170][ T5647] bridge_slave_1: entered allmulticast mode [ 74.889533][ T5647] bridge_slave_1: entered promiscuous mode [ 75.035825][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.052615][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.326441][ T5647] team0: Port device team_slave_0 added [ 75.332226][ T5647] team0: Port device team_slave_1 added [ 75.363387][ T11] hsr_slave_0: left promiscuous mode [ 75.366413][ T11] hsr_slave_1: left promiscuous mode [ 75.372375][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.376018][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.381331][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.385141][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.425506][ T11] veth1_macvtap: left promiscuous mode [ 75.425802][ T11] veth0_macvtap: left promiscuous mode [ 75.425966][ T11] veth1_vlan: left promiscuous mode [ 75.426215][ T11] veth0_vlan: left promiscuous mode [ 75.552578][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 75.578745][ T11] pim6reg527 (unregistering): left allmulticast mode [ 75.583377][ T5347] Bluetooth: hci0: command tx timeout [ 76.251212][ T11] team0 (unregistering): Port device team_slave_1 removed [ 76.341733][ T11] team0 (unregistering): Port device team_slave_0 removed [ 76.639190][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.642157][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.049603][ T5670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 77.075182][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.081268][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.094575][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.127296][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.157632][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.176569][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.255538][ T5694] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.308358][ T5647] hsr_slave_0: entered promiscuous mode [ 77.312773][ T5647] hsr_slave_1: entered promiscuous mode [ 77.674008][ T5347] Bluetooth: hci0: command tx timeout [ 78.119669][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.148366][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.164731][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.174758][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.273563][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.290782][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.326566][ T5520] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.330583][ T5520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.341024][ T5520] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.344410][ T5520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.580131][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.628798][ T5647] veth0_vlan: entered promiscuous mode [ 78.639050][ T5647] veth1_vlan: entered promiscuous mode [ 78.710952][ T5647] veth0_macvtap: entered promiscuous mode [ 78.730145][ T5647] veth1_macvtap: entered promiscuous mode [ 78.747873][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.752404][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.758417][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.762522][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.766551][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.770316][ T5347] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 78.786487][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.792390][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.805058][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.808843][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.812010][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.818018][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.821899][ T5647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.825835][ T5647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.834221][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.845798][ T5647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.850727][ T5647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.855317][ T5647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.858997][ T5647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914525][ T5746] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.929712][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 78.932470][ T5347] Bluetooth: Wrong link type (-22) [ 78.933795][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.935735][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 78.939076][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.945769][ T5347] Bluetooth: Wrong link type (-22) [ 78.945812][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 78.946269][ T5746] input: syz0 as /devices/virtual/input/input12 [ 78.948074][ T5347] Bluetooth: Wrong link type (-22) [ 78.956314][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 78.959886][ T5347] Bluetooth: Wrong link type (-22) [ 78.962142][ T5347] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 78.967057][ T5347] Bluetooth: Wrong link type (-22) [ 78.986654][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.991166][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.719550][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.86'. [ 79.753254][ T5347] Bluetooth: hci0: command tx timeout [ 79.936528][ T5756] warning: `syz.3.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.132407][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 80.253287][ T833] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 80.335017][ T5763] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 80.339559][ T5763] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.90'. [ 80.346628][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 80.372515][ T5765] FAULT_INJECTION: forcing a failure. [ 80.372515][ T5765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.393157][ T5765] CPU: 3 UID: 0 PID: 5765 Comm: syz.0.91 Not tainted 6.11.0-rc1-syzkaller #0 [ 80.397547][ T5765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.402480][ T5765] Call Trace: [ 80.404025][ T5765] [ 80.405090][ T5765] dump_stack_lvl+0x16c/0x1f0 [ 80.407077][ T5765] should_fail_ex+0x497/0x5b0 [ 80.409167][ T5765] _copy_from_user+0x30/0xf0 [ 80.411263][ T5765] sctp_setsockopt+0x422/0xb880 [ 80.413410][ T5765] ? aa_sk_perm+0x2f5/0xb40 [ 80.415285][ T5765] ? __pfx_sctp_setsockopt+0x10/0x10 [ 80.417617][ T5765] ? __pfx_aa_sk_perm+0x10/0x10 [ 80.419769][ T5765] ? sock_common_setsockopt+0x2e/0xf0 [ 80.422144][ T5765] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.424172][ T5765] do_sock_setsockopt+0x222/0x480 [ 80.425994][ T5765] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 80.428362][ T5765] ? __fget_light+0x173/0x210 [ 80.430323][ T5765] __sys_setsockopt+0x1a4/0x270 [ 80.432044][ T5765] ? __pfx___sys_setsockopt+0x10/0x10 [ 80.434107][ T5765] ? fput+0x32/0x390 [ 80.435825][ T5765] ? ksys_write+0x1ab/0x260 [ 80.437813][ T5765] ? __pfx_ksys_write+0x10/0x10 [ 80.439942][ T5765] __ia32_sys_setsockopt+0xbc/0x160 [ 80.442098][ T5765] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.444064][ T5765] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 80.446828][ T5765] __do_fast_syscall_32+0x73/0x120 [ 80.449015][ T5765] do_fast_syscall_32+0x32/0x80 [ 80.451142][ T5765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.453826][ T5765] RIP: 0023:0xf7f42579 [ 80.455627][ T5765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.463852][ T5765] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 80.467156][ T5763] fuse: Bad value for 'fd' [ 80.469233][ T5765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 80.469247][ T5765] RDX: 0000000000000009 RSI: 00000000200000c0 RDI: 000000000000009c [ 80.469259][ T5765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.479039][ T5765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.482124][ T5765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.485548][ T5765] [ 80.543482][ T833] usb 8-1: Invalid ep0 maxpacket: 32 [ 80.663001][ T5772] FAULT_INJECTION: forcing a failure. [ 80.663001][ T5772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.669120][ T5772] CPU: 1 UID: 0 PID: 5772 Comm: syz.0.92 Not tainted 6.11.0-rc1-syzkaller #0 [ 80.673154][ T5772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.677985][ T5772] Call Trace: [ 80.679514][ T5772] [ 80.680970][ T5772] dump_stack_lvl+0x16c/0x1f0 [ 80.683166][ T5772] should_fail_ex+0x497/0x5b0 [ 80.685487][ T5772] _copy_from_iter+0x27a/0xfc0 [ 80.687850][ T5772] ? __pfx__copy_from_iter+0x10/0x10 [ 80.690485][ T5772] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 80.693208][ T5772] ? tun_build_skb.constprop.0+0x1b8/0x1390 [ 80.695474][ T5772] ? __pfx_lock_release+0x10/0x10 [ 80.697613][ T5772] copy_page_from_iter+0xa5/0x120 [ 80.699782][ T5772] tun_build_skb.constprop.0+0x294/0x1390 [ 80.702276][ T5772] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 80.705100][ T5772] tun_get_user+0x888/0x3c20 [ 80.707142][ T5772] ? __pfx_tun_get_user+0x10/0x10 [ 80.709342][ T5772] ? find_held_lock+0x2d/0x110 [ 80.711452][ T5772] ? __pfx_lock_release+0x10/0x10 [ 80.713848][ T5772] tun_chr_write_iter+0xe8/0x210 [ 80.716072][ T5772] vfs_write+0x6b6/0x1140 [ 80.733611][ T5772] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 80.736132][ T5772] ? __pfx_vfs_write+0x10/0x10 [ 80.738280][ T5772] ? __fget_files+0x256/0x400 [ 80.740395][ T5772] ? __fget_light+0x173/0x210 [ 80.742464][ T5772] ksys_write+0x12f/0x260 [ 80.744311][ T5772] ? __pfx_ksys_write+0x10/0x10 [ 80.746457][ T5772] __do_fast_syscall_32+0x73/0x120 [ 80.748729][ T5772] do_fast_syscall_32+0x32/0x80 [ 80.750849][ T5772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.753556][ T5772] RIP: 0023:0xf7f42579 [ 80.755333][ T5772] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.762700][ T5772] RSP: 002b:00000000f56f6540 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 80.766106][ T5772] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020001800 [ 80.769447][ T5772] RDX: 0000000000000036 RSI: 00000000f73cbff4 RDI: 0000000000000000 [ 80.772712][ T5772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.776024][ T5772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.779288][ T5772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.782375][ T5772] [ 80.783812][ T833] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 80.973126][ T833] usb 8-1: Invalid ep0 maxpacket: 32 [ 80.975955][ T833] usb usb8-port1: attempt power cycle [ 81.062601][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'. [ 81.073136][ T5785] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 81.236111][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 81.364811][ T5805] netlink: 'syz.2.102': attribute type 3 has an invalid length. [ 81.369084][ T5805] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.102'. [ 81.380270][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 81.393386][ T833] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 81.424375][ T833] usb 8-1: Invalid ep0 maxpacket: 32 [ 81.488119][ T5805] fuse: Bad value for 'fd' [ 81.589856][ T833] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 81.595225][ T5811] FAULT_INJECTION: forcing a failure. [ 81.595225][ T5811] name failslab, interval 1, probability 0, space 0, times 0 [ 81.600659][ T5811] CPU: 2 UID: 0 PID: 5811 Comm: syz.1.106 Not tainted 6.11.0-rc1-syzkaller #0 [ 81.604611][ T5811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.609309][ T5811] Call Trace: [ 81.610779][ T5811] [ 81.612082][ T5811] dump_stack_lvl+0x16c/0x1f0 [ 81.614490][ T5811] should_fail_ex+0x497/0x5b0 [ 81.616753][ T5811] should_failslab+0xc2/0x120 [ 81.618883][ T5811] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 81.621279][ T5811] ? skb_clone+0x190/0x3f0 [ 81.626367][ T5811] skb_clone+0x190/0x3f0 [ 81.628024][ T5811] netlink_deliver_tap+0xb26/0xcf0 [ 81.628725][ T833] usb 8-1: Invalid ep0 maxpacket: 32 [ 81.629955][ T5811] netlink_unicast+0x606/0x830 [ 81.632249][ T833] usb usb8-port1: unable to enumerate USB device [ 81.633592][ T5811] ? __pfx_netlink_unicast+0x10/0x10 [ 81.633617][ T5811] ? __phys_addr_symbol+0x30/0x80 [ 81.633635][ T5811] ? __check_object_size+0x497/0x720 [ 81.633658][ T5811] netlink_sendmsg+0x8b8/0xd70 [ 81.633681][ T5811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.633705][ T5811] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 81.633724][ T5811] ____sys_sendmsg+0x9b4/0xb50 [ 81.633748][ T5811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.633768][ T5811] ? get_compat_msghdr+0x11b/0x170 [ 81.633789][ T5811] ? __pfx___lock_acquire+0x10/0x10 [ 81.633815][ T5811] ___sys_sendmsg+0x135/0x1e0 [ 81.633834][ T5811] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.633861][ T5811] ? ksys_write+0x21c/0x260 [ 81.633895][ T5811] ? __fget_light+0x173/0x210 [ 81.633921][ T5811] __sys_sendmsg+0x117/0x1f0 [ 81.633939][ T5811] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.633973][ T5811] __do_fast_syscall_32+0x73/0x120 [ 81.634000][ T5811] do_fast_syscall_32+0x32/0x80 [ 81.634024][ T5811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.676956][ T5811] RIP: 0023:0xf7f42579 [ 81.678570][ T5811] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.686406][ T5811] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 81.689608][ T5811] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000340 [ 81.692643][ T5811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.695960][ T5811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.699393][ T5811] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.702829][ T5811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.706093][ T5811] [ 81.824669][ T5347] Bluetooth: hci0: command tx timeout [ 82.375168][ T832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 82.574266][ T832] usb 6-1: Using ep0 maxpacket: 8 [ 82.582289][ T832] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.586390][ T832] usb 6-1: config 0 has no interface number 0 [ 82.589029][ T832] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.594072][ T832] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.600275][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.607394][ T832] usb 6-1: config 0 descriptor?? [ 82.610849][ T5844] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 82.614392][ T5844] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.117'. [ 82.621320][ T832] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 82.623139][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 82.738523][ T5844] fuse: Bad value for 'fd' [ 83.841457][ T832] usb 6-1: USB disconnect, device number 3 [ 83.868928][ T832] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 83.996737][ T5874] FAULT_INJECTION: forcing a failure. [ 83.996737][ T5874] name failslab, interval 1, probability 0, space 0, times 0 [ 84.001782][ T5874] CPU: 2 UID: 0 PID: 5874 Comm: syz.1.125 Not tainted 6.11.0-rc1-syzkaller #0 [ 84.005505][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.009596][ T5874] Call Trace: [ 84.011009][ T5874] [ 84.012502][ T5874] dump_stack_lvl+0x16c/0x1f0 [ 84.014722][ T5874] should_fail_ex+0x497/0x5b0 [ 84.016817][ T5874] ? fs_reclaim_acquire+0xae/0x160 [ 84.018858][ T5874] should_failslab+0xc2/0x120 [ 84.020658][ T5874] __kmalloc_noprof+0xcb/0x410 [ 84.022681][ T5874] ? __pfx_d_absolute_path+0x10/0x10 [ 84.024898][ T5874] tomoyo_encode2+0x100/0x3e0 [ 84.026951][ T5874] tomoyo_realpath_from_path+0x1a7/0x710 [ 84.029209][ T5874] tomoyo_path_number_perm+0x245/0x5b0 [ 84.031738][ T5874] ? tomoyo_path_number_perm+0x232/0x5b0 [ 84.034369][ T5874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.037197][ T5874] ? __pfx_lock_release+0x10/0x10 [ 84.039136][ T5874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.041178][ T5874] ? __fget_files+0x256/0x400 [ 84.043080][ T5874] security_file_ioctl_compat+0x75/0xc0 [ 84.045434][ T5874] __do_compat_sys_ioctl+0x5d/0x330 [ 84.047740][ T5874] __do_fast_syscall_32+0x73/0x120 [ 84.049976][ T5874] do_fast_syscall_32+0x32/0x80 [ 84.052110][ T5874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.054746][ T5874] RIP: 0023:0xf7f42579 [ 84.056475][ T5874] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.063797][ T5874] RSP: 002b:00000000f56f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 84.067321][ T5874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000540b [ 84.070107][ T5874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.072936][ T5874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.076552][ T5874] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.079673][ T5874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.082801][ T5874] [ 84.084312][ C2] vkms_vblank_simulate: vblank timer overrun [ 84.100092][ T5874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.135307][ T5876] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 84.179500][ T5876] bond1: entered promiscuous mode [ 84.197634][ T5885] FAULT_INJECTION: forcing a failure. [ 84.197634][ T5885] name failslab, interval 1, probability 0, space 0, times 0 [ 84.213321][ T5885] CPU: 3 UID: 0 PID: 5885 Comm: syz.2.128 Not tainted 6.11.0-rc1-syzkaller #0 [ 84.216886][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.221189][ T5885] Call Trace: [ 84.222419][ T5885] [ 84.223812][ T5885] dump_stack_lvl+0x16c/0x1f0 [ 84.225732][ T5885] should_fail_ex+0x497/0x5b0 [ 84.227648][ T5885] ? fs_reclaim_acquire+0xae/0x160 [ 84.229731][ T5885] should_failslab+0xc2/0x120 [ 84.231366][ T5885] kmem_cache_alloc_node_noprof+0x71/0x310 [ 84.233679][ T5885] ? copy_process+0x4a3/0x6f50 [ 84.235693][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.237929][ T5885] copy_process+0x4a3/0x6f50 [ 84.239812][ T5885] ? create_io_worker+0x49/0x5f0 [ 84.241868][ T5885] ? kasan_save_stack+0x42/0x60 [ 84.243837][ T5885] ? kasan_save_stack+0x33/0x60 [ 84.246349][ T5885] ? kasan_save_track+0x14/0x30 [ 84.248714][ T5885] ? __kasan_kmalloc+0xaa/0xb0 [ 84.250953][ T5885] ? create_io_worker+0xcc/0x5f0 [ 84.253023][ T5885] ? io_wq_enqueue+0x664/0xb30 [ 84.255080][ T5885] ? io_req_task_submit+0x15a/0x210 [ 84.257508][ T5885] ? io_handle_tw_list+0x4c3/0x540 [ 84.259546][ T5885] ? tctx_task_work_run+0xa9/0x370 [ 84.261446][ T5885] ? __pfx_copy_process+0x10/0x10 [ 84.263323][ T5885] ? __pfx_io_wq_worker+0x10/0x10 [ 84.265180][ T5885] ? create_io_worker+0x49/0x5f0 [ 84.267709][ T5885] create_io_thread+0xaa/0xf0 [ 84.270052][ T5885] ? __pfx_create_io_thread+0x10/0x10 [ 84.272653][ T5885] ? __pfx_io_wq_worker+0x10/0x10 [ 84.274397][ T5885] ? __init_swait_queue_head+0xca/0x150 [ 84.276300][ T5885] create_io_worker+0x1c2/0x5f0 [ 84.278092][ T5885] io_wq_enqueue+0x664/0xb30 [ 84.279896][ T5885] ? __pfx_io_wq_enqueue+0x10/0x10 [ 84.281866][ T5885] ? find_held_lock+0x2d/0x110 [ 84.283698][ T5885] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 84.285707][ T5885] ? io_prep_async_work+0x678/0x7a0 [ 84.287745][ T5885] io_queue_iowq+0x259/0x4e0 [ 84.289586][ T5885] io_req_task_submit+0x15a/0x210 [ 84.291564][ T5885] ? __pfx_io_req_task_submit+0x10/0x10 [ 84.301870][ T5885] io_handle_tw_list+0x4c3/0x540 [ 84.304131][ T5885] ? __pfx_io_handle_tw_list+0x10/0x10 [ 84.306474][ T5885] ? find_held_lock+0x2d/0x110 [ 84.308579][ T5885] tctx_task_work_run+0xa9/0x370 [ 84.310757][ T5885] tctx_task_work+0x7b/0xd0 [ 84.312740][ T5885] ? __pfx_tctx_task_work+0x10/0x10 [ 84.315040][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.317178][ T5885] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.319509][ T5885] task_work_run+0x14e/0x250 [ 84.321434][ T5885] ? __pfx_task_work_run+0x10/0x10 [ 84.323689][ T5885] ? schedule+0x298/0x350 [ 84.325579][ T5885] ? __pfx_lock_release+0x10/0x10 [ 84.327696][ T5885] ? io_run_task_work+0x15d/0x5a0 [ 84.329721][ T5885] io_run_task_work+0x1b5/0x5a0 [ 84.331631][ T5885] ? __pfx_io_run_task_work+0x10/0x10 [ 84.333461][ T5885] ? schedule+0xf1/0x350 [ 84.335250][ T5885] io_cqring_wait+0x93d/0x1480 [ 84.337203][ T5885] ? __pfx_io_cqring_wait+0x10/0x10 [ 84.339212][ T5885] ? __pfx_lock_release+0x10/0x10 [ 84.341051][ T5885] ? __pfx_io_wake_function+0x10/0x10 [ 84.343218][ T5885] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.345636][ T5885] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.347416][ T5885] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.349597][ T5885] __do_sys_io_uring_enter+0x410/0x1130 [ 84.352107][ T5885] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 84.355051][ T5885] ? ksys_write+0x1ab/0x260 [ 84.357267][ T5885] __do_fast_syscall_32+0x73/0x120 [ 84.359467][ T5885] do_fast_syscall_32+0x32/0x80 [ 84.361549][ T5885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.364168][ T5885] RIP: 0023:0xf7f8f579 [ 84.365996][ T5885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.374210][ T5885] RSP: 002b:00000000f574657c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 84.377711][ T5885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 84.381163][ T5885] RDX: 00000000000010a5 RSI: 0000000000000003 RDI: 0000000000000000 [ 84.384617][ T5885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.387776][ T5885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.391182][ T5885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.394810][ T5885] [ 84.546566][ T5894] Cannot find add_set index 0 as target [ 84.774607][ T5893] 9pnet_fd: Insufficient options for proto=fd [ 86.774929][ T5914] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 86.778416][ T5914] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.133'. [ 86.785016][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 86.862613][ T5920] netlink: 'syz.0.134': attribute type 3 has an invalid length. [ 86.866171][ T5920] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.134'. [ 86.868315][ T5919] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 86.880957][ T59] cfg80211: failed to load regulatory.db [ 86.885238][ T5914] fuse: Bad value for 'fd' [ 86.894612][ T5919] batman_adv: batadv0: Adding interface: team0 [ 86.897378][ T5919] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.908916][ T5919] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 86.926262][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 87.062084][ T5920] fuse: Bad value for 'fd' [ 87.154197][ T39] kauditd_printk_skb: 83 callbacks suppressed [ 87.154211][ T39] audit: type=1326 audit(1722275226.774:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.1.137" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 87.234732][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.236393][ T5937] FAULT_INJECTION: forcing a failure. [ 87.236393][ T5937] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 87.246255][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.2.136 Not tainted 6.11.0-rc1-syzkaller #0 [ 87.250181][ T5937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.254908][ T5937] Call Trace: [ 87.256289][ T5937] [ 87.257551][ T5937] dump_stack_lvl+0x16c/0x1f0 [ 87.259698][ T5937] should_fail_ex+0x497/0x5b0 [ 87.261781][ T5937] ? fs_reclaim_acquire+0xae/0x160 [ 87.263935][ T5937] should_fail_alloc_page+0xe7/0x130 [ 87.265827][ T5937] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 87.268019][ T5937] __alloc_pages_noprof+0x194/0x2460 [ 87.269922][ T5937] ? lock_acquire+0x1b1/0x560 [ 87.270389][ T5941] netlink: 'syz.1.137': attribute type 29 has an invalid length. [ 87.271878][ T5937] ? find_held_lock+0x2d/0x110 [ 87.276392][ T5937] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 87.278539][ T5937] ? __mutex_lock+0x28d/0x9c0 [ 87.280315][ T5937] ? __pfx_lock_release+0x10/0x10 [ 87.282199][ T5937] ? do_raw_spin_unlock+0x172/0x230 [ 87.283977][ T5937] ? _raw_spin_unlock+0x28/0x50 [ 87.285926][ T5937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.288007][ T5937] ? policy_nodemask+0xea/0x4e0 [ 87.290123][ T5937] alloc_pages_mpol_noprof+0x275/0x610 [ 87.292471][ T5937] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 87.295068][ T5937] pipe_write+0xe4a/0x1b50 [ 87.296907][ T5937] ? __pfx_pipe_write+0x10/0x10 [ 87.299016][ T5937] ? apparmor_file_permission+0x251/0x410 [ 87.301283][ T5937] ? bpf_lsm_file_permission+0x9/0x10 [ 87.303530][ T5937] ? security_file_permission+0x98/0xc0 [ 87.305687][ T5937] vfs_write+0x6b6/0x1140 [ 87.307182][ T5937] ? __pfx_pipe_write+0x10/0x10 [ 87.308866][ T5937] ? __pfx_vfs_write+0x10/0x10 [ 87.310660][ T5937] ? __fget_files+0x256/0x400 [ 87.312402][ T5937] ? __fget_light+0x173/0x210 [ 87.314634][ T5937] ksys_write+0x1f8/0x260 [ 87.316698][ T5937] ? __pfx_ksys_write+0x10/0x10 [ 87.318679][ T5937] __do_fast_syscall_32+0x73/0x120 [ 87.320893][ T5937] do_fast_syscall_32+0x32/0x80 [ 87.323043][ T5937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.325775][ T5937] RIP: 0023:0xf7f8f579 [ 87.327517][ T5937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.335805][ T5937] RSP: 002b:00000000f570457c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 87.339341][ T5937] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000200 [ 87.342741][ T5937] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.346124][ T5937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.349636][ T5937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.353081][ T5937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.356480][ T5937] [ 88.113694][ T5964] netlink: 'syz.1.144': attribute type 3 has an invalid length. [ 88.133143][ T5964] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.144'. [ 88.148803][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 88.248187][ T5964] fuse: Bad value for 'fd' [ 88.412410][ T5972] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 88.790084][ T5978] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.803426][ T5978] input: syz1 as /devices/virtual/input/input19 [ 88.805988][ T5978] input: failed to attach handler leds to device input19, error: -6 [ 91.995828][ T6008] capability: warning: `syz.2.157' uses 32-bit capabilities (legacy support in use) [ 92.498384][ T6021] netlink: 'syz.3.160': attribute type 3 has an invalid length. [ 92.501817][ T6021] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.160'. [ 92.511295][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 92.621956][ T6021] fuse: Bad value for 'fd' [ 95.015508][ T6063] netlink: 'syz.2.171': attribute type 3 has an invalid length. [ 95.019014][ T6063] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.042901][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.187783][ T6063] fuse: Bad value for 'fd' [ 95.323476][ T6069] mmap: syz.0.173 (6069) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.391489][ T6079] netlink: 64 bytes leftover after parsing attributes in process `syz.2.174'. [ 95.520289][ T6078] fuse: Unknown parameter 'group_id00000000000000000000' [ 95.677986][ T6085] FAULT_INJECTION: forcing a failure. [ 95.677986][ T6085] name failslab, interval 1, probability 0, space 0, times 0 [ 95.703179][ T6085] CPU: 3 UID: 0 PID: 6085 Comm: syz.2.175 Not tainted 6.11.0-rc1-syzkaller #0 [ 95.707156][ T6085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.711908][ T6085] Call Trace: [ 95.713433][ T6085] [ 95.714798][ T6085] dump_stack_lvl+0x16c/0x1f0 [ 95.716918][ T6085] should_fail_ex+0x497/0x5b0 [ 95.719008][ T6085] ? fs_reclaim_acquire+0xae/0x160 [ 95.721302][ T6085] should_failslab+0xc2/0x120 [ 95.723412][ T6085] __kmalloc_noprof+0xcb/0x410 [ 95.725580][ T6085] ? __pfx_d_absolute_path+0x10/0x10 [ 95.727953][ T6085] tomoyo_encode2+0x100/0x3e0 [ 95.730042][ T6085] tomoyo_realpath_from_path+0x1a7/0x710 [ 95.732532][ T6085] tomoyo_path_number_perm+0x245/0x5b0 [ 95.734994][ T6085] ? tomoyo_path_number_perm+0x232/0x5b0 [ 95.737497][ T6085] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.740014][ T6085] ? __pfx_lock_release+0x10/0x10 [ 95.742202][ T6085] ? irqentry_exit+0x3b/0x90 [ 95.744212][ T6085] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.746511][ T6085] ? __pfx_hook_file_ioctl_compat+0x10/0x10 [ 95.749016][ T6085] ? __do_compat_sys_ioctl+0x3a/0x330 [ 95.750906][ T6085] security_file_ioctl_compat+0x75/0xc0 [ 95.753315][ T6085] __do_compat_sys_ioctl+0x5d/0x330 [ 95.755576][ T6085] __do_fast_syscall_32+0x73/0x120 [ 95.757334][ T6085] do_fast_syscall_32+0x32/0x80 [ 95.759469][ T6085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.762266][ T6085] RIP: 0023:0xf7f8f579 [ 95.763975][ T6085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.772236][ T6085] RSP: 002b:00000000f574657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 95.775416][ T6085] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0684113 [ 95.778719][ T6085] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.782066][ T6085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.784982][ T6085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.787819][ T6085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.790617][ T6085] [ 95.796020][ T6085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.124706][ T6097] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 96.132707][ T6097] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.178'. [ 96.158052][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 96.243848][ T6097] fuse: Bad value for 'fd' [ 98.088839][ T6127] netlink: 64 bytes leftover after parsing attributes in process `syz.1.184'. [ 98.677737][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 98.906256][ T6145] autofs: Bad value for 'fd' [ 99.082073][ T6150] netlink: 'syz.1.189': attribute type 3 has an invalid length. [ 99.085185][ T6150] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.130586][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 99.218219][ T6150] fuse: Bad value for 'fd' [ 100.572592][ T6181] netlink: 64 bytes leftover after parsing attributes in process `syz.0.196'. [ 102.828190][ T6231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.209'. [ 102.950954][ T6240] process 'syz.1.213' launched './file1' with NULL argv: empty string added [ 103.350002][ T6250] fuse: Unknown parameter 'group_id00000000000000000000' [ 103.581811][ T6253] fuse: Unknown parameter 'group_id00000000000000000000' [ 106.174458][ T6278] FAULT_INJECTION: forcing a failure. [ 106.174458][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 106.180194][ T6278] CPU: 3 UID: 0 PID: 6278 Comm: syz.2.223 Not tainted 6.11.0-rc1-syzkaller #0 [ 106.184139][ T6278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.188416][ T6278] Call Trace: [ 106.189737][ T6278] [ 106.190891][ T6278] dump_stack_lvl+0x16c/0x1f0 [ 106.192732][ T6278] should_fail_ex+0x497/0x5b0 [ 106.194664][ T6278] ? fs_reclaim_acquire+0xae/0x160 [ 106.196672][ T6278] should_failslab+0xc2/0x120 [ 106.198595][ T6278] __kmalloc_noprof+0xcb/0x410 [ 106.200709][ T6278] ? __pfx_lock_acquire+0x10/0x10 [ 106.203104][ T6278] tomoyo_realpath_from_path+0xbf/0x710 [ 106.205621][ T6278] ? tomoyo_profile+0x47/0x60 [ 106.207757][ T6278] tomoyo_path_number_perm+0x245/0x5b0 [ 106.210222][ T6278] ? tomoyo_path_number_perm+0x232/0x5b0 [ 106.212656][ T6278] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.215063][ T6278] ? __pfx_lock_release+0x10/0x10 [ 106.217027][ T6278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.220127][ T6278] ? __fget_files+0x256/0x400 [ 106.222573][ T6278] security_file_ioctl_compat+0x75/0xc0 [ 106.224851][ T6278] __do_compat_sys_ioctl+0x5d/0x330 [ 106.226979][ T6278] __do_fast_syscall_32+0x73/0x120 [ 106.229042][ T6278] do_fast_syscall_32+0x32/0x80 [ 106.231926][ T6278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.235021][ T6278] RIP: 0023:0xf7f8f579 [ 106.236864][ T6278] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.245547][ T6278] RSP: 002b:00000000f574657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 106.248775][ T6278] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000125f [ 106.251841][ T6278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.255052][ T6278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.258102][ T6278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.260783][ T6278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.263804][ T6278] [ 106.266735][ T6278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.608688][ T6282] fuse: Bad value for 'user_id' [ 106.610291][ T6282] fuse: Bad value for 'user_id' [ 109.895431][ T6315] FAULT_INJECTION: forcing a failure. [ 109.895431][ T6315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.899774][ T6312] overlayfs: missing 'lowerdir' [ 109.903247][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.2.233 Not tainted 6.11.0-rc1-syzkaller #0 [ 109.907155][ T6315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.911809][ T6315] Call Trace: [ 109.913359][ T6315] [ 109.913793][ T6312] overlay: Bad value for 'redirect_dir' [ 109.914693][ T6315] dump_stack_lvl+0x16c/0x1f0 [ 109.918836][ T6315] should_fail_ex+0x497/0x5b0 [ 109.920936][ T6315] _copy_from_user+0x30/0xf0 [ 109.923006][ T6315] get_compat_msghdr+0xa8/0x170 [ 109.925168][ T6315] ? __pfx_get_compat_msghdr+0x10/0x10 [ 109.927605][ T6315] ? __pfx___lock_acquire+0x10/0x10 [ 109.930251][ T6315] ___sys_sendmsg+0x1b0/0x1e0 [ 109.932284][ T6315] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.934546][ T6315] ? ksys_write+0x21c/0x260 [ 109.936495][ T6315] ? __fget_light+0x173/0x210 [ 109.938493][ T6315] __sys_sendmsg+0x117/0x1f0 [ 109.940453][ T6315] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.942670][ T6315] __do_fast_syscall_32+0x73/0x120 [ 109.944697][ T6315] do_fast_syscall_32+0x32/0x80 [ 109.946795][ T6315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.949300][ T6315] RIP: 0023:0xf7f8f579 [ 109.950952][ T6315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.958597][ T6315] RSP: 002b:00000000f574657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 109.961513][ T6315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 109.964225][ T6315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.967340][ T6315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.970117][ T6315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 109.972584][ T6315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.975253][ T6315] [ 110.016445][ T5353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.019958][ T5353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.024094][ T5353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.028751][ T5353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.032454][ T5353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.037774][ T5353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.054928][ T6319] netlink: 164320 bytes leftover after parsing attributes in process `syz.2.234'. [ 110.201614][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 110.414581][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.417845][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.421182][ T6316] bridge_slave_0: entered allmulticast mode [ 110.428320][ T6316] bridge_slave_0: entered promiscuous mode [ 110.438661][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.441886][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.446865][ T6316] bridge_slave_1: entered allmulticast mode [ 110.450887][ T6316] bridge_slave_1: entered promiscuous mode [ 110.529147][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.539819][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.625127][ T6316] team0: Port device team_slave_0 added [ 110.631560][ T6316] team0: Port device team_slave_1 added [ 110.697852][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.700480][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.712378][ T6316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.719856][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.722820][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.733508][ T6316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.824900][ T6316] hsr_slave_0: entered promiscuous mode [ 110.835871][ T6316] hsr_slave_1: entered promiscuous mode [ 110.839600][ T6316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.842786][ T6316] Cannot create hsr debugfs directory [ 111.116646][ T6316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.227795][ T6316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.282440][ T39] audit: type=1800 audit(1722275250.894:96): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="/" dev="9p" ino=2 res=0 errno=0 [ 111.329328][ T6316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.437421][ T6316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.620367][ T6316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.627859][ T6316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.628922][ T6345] fuse: Bad value for 'user_id' [ 111.632900][ T6345] fuse: Bad value for 'user_id' [ 111.636651][ T6316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.650270][ T6316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.751546][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.770468][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.778715][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.782036][ T5386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.806562][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.809561][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.841651][ T6316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.002452][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.049440][ T6316] veth0_vlan: entered promiscuous mode [ 112.058721][ T6316] veth1_vlan: entered promiscuous mode [ 112.063886][ T5347] Bluetooth: hci4: command tx timeout [ 112.092307][ T6316] veth0_macvtap: entered promiscuous mode [ 112.101410][ T6316] veth1_macvtap: entered promiscuous mode [ 112.120779][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.124881][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.128898][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.132703][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.140821][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.146084][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.150119][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.155740][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.161898][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.174799][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.179741][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.188341][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.194953][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.198883][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.211996][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.216416][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.220463][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.226917][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.236575][ T6316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.240403][ T6316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.244391][ T6316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.248142][ T6316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.327407][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.331526][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.362297][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.366364][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.713421][ T5386] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 112.913119][ T5386] usb 8-1: Using ep0 maxpacket: 16 [ 112.917867][ T5386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.922583][ T5386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.927153][ T5386] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.932614][ T5386] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.936770][ T5386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.942252][ T5386] usb 8-1: config 0 descriptor?? [ 113.118109][ T5353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.123459][ T5353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.127579][ T5353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.132596][ T5353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.137245][ T5353] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 113.141392][ T5353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.276326][ T6361] fuse: Unknown parameter 'group_id00000000000000000000' [ 113.366553][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 113.708171][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.711723][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.715594][ T6362] bridge_slave_0: entered allmulticast mode [ 113.722835][ T6362] bridge_slave_0: entered promiscuous mode [ 113.731530][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.734867][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.738448][ T6362] bridge_slave_1: entered allmulticast mode [ 113.743668][ T6362] bridge_slave_1: entered promiscuous mode [ 113.881767][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.893722][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.903941][ T5386] usbhid 8-1:0.0: can't add hid device: -71 [ 113.907072][ T5386] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 113.927900][ T5386] usb 8-1: USB disconnect, device number 6 [ 113.991032][ T6362] team0: Port device team_slave_0 added [ 114.011705][ T6362] team0: Port device team_slave_1 added [ 114.094277][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.097014][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.111286][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.117408][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.120657][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.133249][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.153903][ T5347] Bluetooth: hci4: command tx timeout [ 114.202912][ T6362] hsr_slave_0: entered promiscuous mode [ 114.208293][ T6362] hsr_slave_1: entered promiscuous mode [ 114.211533][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.215018][ T6362] Cannot create hsr debugfs directory [ 114.502047][ T6362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.645805][ T6362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.780374][ T6362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.895966][ T6362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.132432][ T6362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.145491][ T6362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.152204][ T6362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.183277][ T5347] Bluetooth: hci5: command tx timeout [ 115.191050][ T6362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.321924][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.350153][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.363885][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.367099][ T5386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.382936][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.385999][ T5386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.610512][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.657363][ T6362] veth0_vlan: entered promiscuous mode [ 115.671286][ T6362] veth1_vlan: entered promiscuous mode [ 115.710642][ T6362] veth0_macvtap: entered promiscuous mode [ 115.720735][ T6362] veth1_macvtap: entered promiscuous mode [ 115.764872][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.771193][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.775696][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.788788][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.793026][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.797462][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.801903][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.811511][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.816249][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.820830][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.831469][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.842021][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.851146][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.854855][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.858936][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.869389][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.875777][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.880098][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.888502][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.892451][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.896661][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.902462][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.925982][ T6362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.929758][ T6362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.936361][ T6362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.940452][ T6362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.029748][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.039040][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.077176][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.081006][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.197069][ T4832] udevd[4832]: worker [5502] terminated by signal 33 (Unknown signal 33) [ 116.200492][ T4832] udevd[4832]: worker [5502] failed while handling '/devices/virtual/block/loop0' [ 116.224412][ T5347] Bluetooth: hci4: command tx timeout [ 117.074511][ T39] audit: type=1800 audit(1722275256.684:97): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.246" name="/" dev="9p" ino=2 res=0 errno=0 [ 117.264010][ T5347] Bluetooth: hci5: command tx timeout [ 117.582596][ T6405] fuse: Bad value for 'user_id' [ 117.589349][ T6405] fuse: Bad value for 'user_id' [ 117.805333][ T6409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.083816][ T5347] Bluetooth: hci0: Malformed LE Event: 0x02 [ 118.313404][ T5347] Bluetooth: hci4: command tx timeout [ 119.344136][ T5347] Bluetooth: hci5: command tx timeout [ 119.351262][ T39] audit: type=1800 audit(1722275258.964:98): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="/" dev="9p" ino=2 res=0 errno=0 [ 121.293192][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.423947][ T5347] Bluetooth: hci5: command tx timeout [ 121.499691][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 121.523810][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.528661][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.532843][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.555657][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 121.559665][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.575716][ T10] usb 8-1: config 0 descriptor?? [ 122.002777][ T10] hid-generic 0003:1E7D:71CE.0002: collection stack underflow [ 122.018587][ T10] hid-generic 0003:1E7D:71CE.0002: item 0 2 0 12 parsing failed [ 122.022677][ T10] hid-generic 0003:1E7D:71CE.0002: probe with driver hid-generic failed with error -22 [ 122.123437][ T5353] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.128687][ T5353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.133342][ T5353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.138782][ T5353] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.142941][ T5353] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 122.147580][ T5353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.330896][ T39] audit: type=1800 audit(1722275261.944:99): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.264" name="/" dev="9p" ino=2 res=0 errno=0 [ 122.441478][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 122.755740][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.762958][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.766963][ T6448] bridge_slave_0: entered allmulticast mode [ 122.769860][ T6448] bridge_slave_0: entered promiscuous mode [ 122.787882][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.790840][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.794847][ T6448] bridge_slave_1: entered allmulticast mode [ 122.798180][ T6448] bridge_slave_1: entered promiscuous mode [ 122.957308][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.968693][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.107733][ T6448] team0: Port device team_slave_0 added [ 123.127502][ T6448] team0: Port device team_slave_1 added [ 123.267674][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.273498][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.295801][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.346995][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.350308][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.363248][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.476619][ T6448] hsr_slave_0: entered promiscuous mode [ 123.479939][ T6448] hsr_slave_1: entered promiscuous mode [ 123.482712][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.486489][ T6448] Cannot create hsr debugfs directory [ 123.709719][ T6448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.785174][ T6448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.868307][ T6448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.937763][ T6448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.115892][ T6448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.127377][ T6448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.138524][ T6448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.146735][ T6448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.197012][ T832] usb 8-1: USB disconnect, device number 7 [ 124.233497][ T5353] Bluetooth: hci6: command tx timeout [ 124.242314][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.263935][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.277801][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.280856][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.294613][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.297600][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.335251][ T6448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.339569][ T6448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.539461][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.600030][ T6448] veth0_vlan: entered promiscuous mode [ 124.622967][ T6448] veth1_vlan: entered promiscuous mode [ 124.721349][ T6448] veth0_macvtap: entered promiscuous mode [ 124.729458][ T6448] veth1_macvtap: entered promiscuous mode [ 124.748369][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.752807][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.758887][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.763569][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.767721][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.772199][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.776267][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.782025][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.786769][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.790624][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.794216][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.798693][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.806737][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.816711][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.821320][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.826438][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.830880][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.837237][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.841598][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.847717][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.852187][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.857804][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.862264][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.870859][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.880328][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.888384][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.895797][ T6448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.899516][ T6448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.903714][ T6448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.907455][ T6448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.049588][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.057519][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.084247][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.090206][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.193311][ T6486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.325316][ T5353] Bluetooth: hci5: Malformed LE Event: 0x02 [ 126.303568][ T5353] Bluetooth: hci6: command tx timeout [ 126.910753][ T39] audit: type=1326 audit(1722275266.524:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.0.281" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x0 [ 127.323643][ T6530] FAULT_INJECTION: forcing a failure. [ 127.323643][ T6530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.329120][ T6530] CPU: 2 UID: 0 PID: 6530 Comm: syz.2.282 Not tainted 6.11.0-rc1-syzkaller #0 [ 127.332841][ T6530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.337433][ T6530] Call Trace: [ 127.338864][ T6530] [ 127.340148][ T6530] dump_stack_lvl+0x16c/0x1f0 [ 127.342183][ T6530] should_fail_ex+0x497/0x5b0 [ 127.344203][ T6530] _copy_from_user+0x30/0xf0 [ 127.346208][ T6530] move_addr_to_kernel+0x68/0x160 [ 127.347955][ T6530] __sys_connect+0xbd/0x170 [ 127.349470][ T6530] ? __pfx___sys_connect+0x10/0x10 [ 127.351501][ T6530] ? __pfx_ksys_write+0x10/0x10 [ 127.353529][ T6530] __ia32_sys_connect+0x71/0xb0 [ 127.355468][ T6530] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 127.357507][ T6530] __do_fast_syscall_32+0x73/0x120 [ 127.359653][ T6530] do_fast_syscall_32+0x32/0x80 [ 127.361678][ T6530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.364217][ T6530] RIP: 0023:0xf7fc3579 [ 127.365778][ T6530] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.373123][ T6530] RSP: 002b:00000000f577657c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 127.376791][ T6530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 127.380278][ T6530] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 127.383710][ T6530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.386559][ T6530] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.389672][ T6530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.392625][ T6530] [ 127.831720][ T6547] team0: entered promiscuous mode [ 127.835602][ T6547] team_slave_0: entered promiscuous mode [ 127.838426][ T6547] team_slave_1: entered promiscuous mode [ 127.845831][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 127.852720][ T6545] team0: left promiscuous mode [ 127.855955][ T6545] team_slave_0: left promiscuous mode [ 127.858863][ T6545] team_slave_1: left promiscuous mode [ 128.062449][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.207958][ T6555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.267404][ T5353] Bluetooth: hci4: Malformed LE Event: 0x02 [ 128.333513][ T5353] Bluetooth: hci5: Malformed LE Event: 0x02 [ 128.383270][ T5353] Bluetooth: hci6: command tx timeout [ 130.165999][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 130.213918][ T6588] FAULT_INJECTION: forcing a failure. [ 130.213918][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.219282][ T6588] CPU: 3 UID: 0 PID: 6588 Comm: syz.0.301 Not tainted 6.11.0-rc1-syzkaller #0 [ 130.222526][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.227138][ T6588] Call Trace: [ 130.228630][ T6588] [ 130.229929][ T6588] dump_stack_lvl+0x16c/0x1f0 [ 130.231982][ T6588] should_fail_ex+0x497/0x5b0 [ 130.233678][ T6588] _copy_from_user+0x30/0xf0 [ 130.235589][ T6588] get_compat_msghdr+0xa8/0x170 [ 130.237568][ T6588] ? __pfx_get_compat_msghdr+0x10/0x10 [ 130.239597][ T6588] ? __pfx___lock_acquire+0x10/0x10 [ 130.241757][ T6588] ___sys_sendmsg+0x1b0/0x1e0 [ 130.243713][ T6588] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.245732][ T6588] ? ksys_write+0x21c/0x260 [ 130.247396][ T6588] ? __fget_light+0x173/0x210 [ 130.249350][ T6588] __sys_sendmsg+0x117/0x1f0 [ 130.251088][ T6588] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.253114][ T6588] __do_fast_syscall_32+0x73/0x120 [ 130.255066][ T6588] do_fast_syscall_32+0x32/0x80 [ 130.257027][ T6588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.259695][ T6588] RIP: 0023:0xf7fb3579 [ 130.261452][ T6588] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.269502][ T6588] RSP: 002b:00000000f576657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 130.273112][ T6588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 130.276740][ T6588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.279788][ T6588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.282874][ T6588] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.285686][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.288836][ T6588] [ 130.292043][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 130.297454][ C3] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 130.302653][ C3] CPU: 3 UID: 0 PID: 6589 Comm: syz.3.298 Not tainted 6.11.0-rc1-syzkaller #0 [ 130.305949][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.309830][ C3] RIP: 0010:__dev_flush+0x49/0x1e0 [ 130.311333][ C3] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 130.318653][ C3] RSP: 0018:ffffc900005f0c90 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 130.321003][ C3] RAX: dffffc0000000000 RBX: ffffffffffffff80 RCX: ffffffff88f122cb [ 130.324895][ C3] RDX: 0000000000000000 RSI: ffffffff81b15286 RDI: ffffc90021607a58 [ 130.327452][ C3] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 130.330574][ C3] R10: 0000000000000010 R11: 0000000000000000 R12: ffffc90021607a48 [ 130.334353][ C3] R13: ffff88802c340648 R14: ffffc90021607a58 R15: ffffc90021607a58 [ 130.337728][ C3] FS: 0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5704b40 [ 130.341568][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 130.344262][ C3] CR2: 0000000020012000 CR3: 0000000069352000 CR4: 0000000000350ef0 [ 130.347599][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.350859][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.353565][ C3] Call Trace: [ 130.354691][ C3] [ 130.355947][ C3] ? show_regs+0x8c/0xa0 [ 130.357462][ C3] ? die_addr+0x4f/0xd0 [ 130.359196][ C3] ? exc_general_protection+0x155/0x230 [ 130.361822][ C3] ? asm_exc_general_protection+0x26/0x30 [ 130.364482][ C3] ? xdp_do_check_flushed+0x21b/0x4e0 [ 130.367146][ C3] ? __dev_flush+0x16/0x1e0 [ 130.369687][ C3] ? __dev_flush+0x49/0x1e0 [ 130.371525][ C3] xdp_do_check_flushed+0x26b/0x4e0 [ 130.373606][ C3] __napi_poll.constprop.0+0xd1/0x550 [ 130.375494][ C3] net_rx_action+0xa92/0x1010 [ 130.377233][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 130.379444][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 130.381638][ C3] ? sched_clock+0x38/0x60 [ 130.383453][ C3] ? sched_clock_cpu+0x6d/0x4d0 [ 130.385366][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.387635][ C3] handle_softirqs+0x216/0x8f0 [ 130.389580][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 130.391898][ C3] ? tun_get_user+0x1d66/0x3c20 [ 130.393996][ C3] do_softirq+0xb2/0xf0 [ 130.395883][ C3] [ 130.397201][ C3] [ 130.398524][ C3] __local_bh_enable_ip+0x100/0x120 [ 130.400818][ C3] ? tun_get_user+0x1d66/0x3c20 [ 130.402998][ C3] tun_get_user+0x1d80/0x3c20 [ 130.404839][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 130.406658][ C3] ? find_held_lock+0x2d/0x110 [ 130.408571][ C3] ? __pfx_lock_release+0x10/0x10 [ 130.410488][ C3] tun_chr_write_iter+0xe8/0x210 [ 130.412097][ C3] vfs_write+0x6b6/0x1140 [ 130.413874][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 130.416022][ C3] ? __pfx_vfs_write+0x10/0x10 [ 130.417718][ C3] ? __fget_files+0x256/0x400 [ 130.419674][ C3] ? __fget_light+0x173/0x210 [ 130.421625][ C3] ksys_write+0x12f/0x260 [ 130.423153][ C3] ? __pfx_ksys_write+0x10/0x10 [ 130.425044][ C3] __do_fast_syscall_32+0x73/0x120 [ 130.426821][ C3] do_fast_syscall_32+0x32/0x80 [ 130.428457][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.430805][ C3] RIP: 0023:0xf7f94579 [ 130.432424][ C3] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.440484][ C3] RSP: 002b:00000000f5704540 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 130.443704][ C3] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000a00 [ 130.447107][ C3] RDX: 0000000000011dc0 RSI: 00000000f741bff4 RDI: 0000000000000000 [ 130.450637][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.454043][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.457423][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.460689][ C3] [ 130.461916][ C3] Modules linked in: [ 130.463779][ C3] ---[ end trace 0000000000000000 ]--- [ 130.466149][ C3] RIP: 0010:__dev_flush+0x49/0x1e0 [ 130.468389][ C3] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 130.477607][ C3] RSP: 0018:ffffc900005f0c90 EFLAGS: 00010246 [ 130.480250][ C3] RAX: dffffc0000000000 RBX: ffffffffffffff80 RCX: ffffffff88f122cb [ 130.483728][ C3] RDX: 0000000000000000 RSI: ffffffff81b15286 RDI: ffffc90021607a58 [ 130.487014][ C3] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 130.490342][ C3] R10: 0000000000000010 R11: 0000000000000000 R12: ffffc90021607a48 [ 130.493608][ C3] R13: ffff88802c340648 R14: ffffc90021607a58 R15: ffffc90021607a58 [ 130.497141][ C3] FS: 0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5704b40 [ 130.500626][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 130.503559][ C3] CR2: 0000000020012000 CR3: 0000000069352000 CR4: 0000000000350ef0 [ 130.506901][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.510618][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.514254][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 130.517940][ C3] Kernel Offset: disabled [ 130.519807][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:47:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802c344bc0 RCX=ffffffff817efb0b RDX=ffff888020b40000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900070ef908 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed1005868979 R13=0000000000000001 R14=ffff88802c344bc8 R15=ffff88802c040000 RIP=ffffffff818b1fed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ee08ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0040000000000000 Opmask01=0000000000400000 Opmask02=0000000000004000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5de5e440 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d616e20657261 7764726148205d38 38353654205b5d36 32353232322e3033 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202c39482049202b 2035335128204338 20353654205b5d36 32203232322e2033 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332e36312e312d6e 61696265642d332e 36312e3120534f49 42202c2939303032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3320313120302d20 30000a34312d322e 31302e312020312b 32202c293930302d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003b1bdc RBX=0000000000000001 RCX=ffffffff8b05ea19 RDX=ffffed1005826fe2 RSI=ffffffff8bb04b20 RDI=ffffffff81633abc RBP=ffffed1002cf8910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed1005826fe1 R10=ffff88802c137f0b R11=0000000000000001 R12=0000000000000001 R13=ffff8880167c4880 R14=ffffffff9010fe98 R15=0000000000000000 RIP=ffffffff8b05fe0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020028000 CR3=0000000068c52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000002efd5 RBX=ffffc90003b1efb0 RCX=ffffffff813c804d RDX=0000000000000000 RSI=ffffffff813c805b RDI=ffffffff91591f74 RBP=0000000000000001 RSP=ffffc90003b1ef30 R8 =0000000000000004 R9 =000000000000d3e5 R10=00000000000a4000 R11=dffffc0000000000 R12=ffffffff81d3e5bd R13=000000000000d3e5 R14=000000000000d3e5 R15=ffffc90003b1efe5 RIP=ffffffff813c8099 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f49565b1d00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563b8e948000 CR3=00000000200ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=2b1ed43e2b1ed43e 2b1ed43e2b1ed43e 2b1ed43e2b1ed43e 2b1ed43e2b1ed43e 2b1ed43e2b1ed43e 2b1ed43e2b1ed43e 2b1ed43e2b1ed43e 2b1ed43e2b1ed43e ZMM22=c67289cfc67289cf c67289cfc67289cf c67289cfc67289cf c67289cfc67289cf c67289cfc67289cf c67289cfc67289cf c67289cfc67289cf c67289cfc67289cf ZMM23=85b4ddee85b4ddee 85b4ddee85b4ddee 85b4ddee85b4ddee 85b4ddee85b4ddee 85b4ddee85b4ddee 85b4ddee85b4ddee 85b4ddee85b4ddee 85b4ddee85b4ddee ZMM24=3bf41eeb3bf41eeb 3bf41eeb3bf41eeb 3bf41eeb3bf41eeb 3bf41eeb3bf41eeb 3bf41eeb3bf41eeb 3bf41eeb3bf41eeb 3bf41eeb3bf41eeb 3bf41eeb3bf41eeb ZMM25=ce91a0dcce91a0dc ce91a0dcce91a0dc ce91a0dcce91a0dc ce91a0dcce91a0dc ce91a0dcce91a0dc ce91a0dcce91a0dc ce91a0dcce91a0dc ce91a0dcce91a0dc ZMM26=938090fa938090fa 938090fa938090fa 938090fa938090fa 938090fa938090fa 938090fa938090fa 938090fa938090fa 938090fa938090fa 938090fa938090fa ZMM27=e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 e5e96cd0e5e96cd0 ZMM28=000000600000005f 0000005e0000005d 0000005c0000005b 0000005a00000059 0000005800000057 0000005600000055 0000005400000053 0000005200000051 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9a0600009a060000 9a0600009a060000 9a0600009a060000 9a0600009a060000 9a0600009a060000 9a0600009a060000 9a0600009a060000 9a0600009a060000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff84fa2890 RDI=ffffffff951173c0 RBP=ffffffff95117380 RSP=ffffc900005f0658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000060 R14=fffffbfff2a22eca R15=dffffc0000000000 RIP=ffffffff84fa28b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020012000 CR3=0000000069352000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000