last executing test programs: 27.653376326s ago: executing program 3 (id=2589): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x89) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=ANY=[], 0xff02, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default]}, 0x48) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f0003000000"], 0x3c}}, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000940)=""/240, 0xf0}, 0x40012163) 21.77223477s ago: executing program 3 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=@gettaction={0xec, 0x32, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xec}}, 0x200488b4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) 21.652300623s ago: executing program 3 (id=2612): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x340, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) 20.152360456s ago: executing program 3 (id=2618): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000021000000000029009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000580)=@sr0, &(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='erofs\x00', 0x2000040, 0x0) 19.992273682s ago: executing program 2 (id=2621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r2 = syz_open_pts(r1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="cf900e00000000000000653d6d6d810000000e5b472d2a07e7", @ANYRESHEX=0x0, @ANYBLOB=',cache=mmap,access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x9e, &(0x7f0000000400)=""/158, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast1}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x2}}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x3, 0x0, @mcast1, @loopback={0xff000000, 0xffff8881a56043d8}, 0x0, 0x10, 0x0, 0x3}}) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000183e00"/28], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) 19.842205055s ago: executing program 3 (id=2622): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffff18, &(0x7f0000000180)=[{0x11, 0x7f}, {0x4, 0x8}, {0x5cef, 0xc216}, {0x7, 0x929}]}) (async) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffff18, &(0x7f0000000180)=[{0x11, 0x7f}, {0x4, 0x8}, {0x5cef, 0xc216}, {0x7, 0x929}]}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20002000}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20002000}) epoll_wait(r2, &(0x7f00000011c0)=[{}], 0x1, 0x0) 19.352192702s ago: executing program 3 (id=2624): openat$kvm(0x0, &(0x7f0000000300), 0x9434fcbb8e539d9e, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000300), 0x9434fcbb8e539d9e, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000200)={@private=0xa010102, @broadcast, 0xffffffffffffffff, "199e2dc8630b9600cb908db480b86d640bdb5b6ca3120000000200", 0x80000006, 0xfffffffe, 0xffffffff, 0x10001}, 0x3c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="243ea4f8"], 0xe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x800000004, {0x0, 0x0, 0x4}}, 0x18) (async) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x800000004, {0x0, 0x0, 0x4}}, 0x18) sendmmsg(r5, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387e9abb80a0132c89b", 0x0, 0x900000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000480)=0x400000) 18.244439415s ago: executing program 2 (id=2626): ioperm(0x0, 0x3ff, 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000380)={0x8, 0x3ca}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x800e1000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003040)=@deltclass={0x1040, 0x29, 0x10, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xb}, {0x0, 0xffe0}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1014, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x3, 0x2, 0x1, 0x7, 0xffffffff, 0x1, 0x0, 0x8000, 0xf, 0x800, 0x6, 0x7, 0x4, 0x8, 0x3, 0x6d, 0xf6, 0x1, 0xa, 0x80, 0x9, 0x7, 0x3ff, 0x0, 0xa, 0x5, 0x4, 0xcee0, 0x8, 0x6, 0xf2d, 0x8268, 0x1, 0x401, 0x4, 0xd3, 0x4, 0x0, 0x2, 0x3, 0x1, 0xf, 0xf8000000, 0x3, 0x81, 0x9, 0xff, 0x7, 0x695c, 0x4, 0xa, 0x1, 0x3, 0xfff, 0xff, 0x7c, 0x0, 0xd40, 0x1, 0x5, 0xfff, 0x4, 0x40, 0x5, 0x5, 0x1, 0x8, 0xe448, 0xf2f, 0x2, 0x81, 0x8, 0x4, 0xffff, 0x401, 0x1, 0x10001, 0x401, 0x5, 0x90, 0x7, 0xffff21e2, 0xff, 0x9, 0x9e, 0x0, 0x2, 0x171, 0x81, 0xffffffff, 0x5, 0xc5b, 0x8001, 0x1, 0x1, 0x81, 0x0, 0x1, 0x9, 0x10, 0x100, 0x9a, 0x5e, 0xfffffff9, 0x7, 0x8, 0x4, 0x7, 0x1000, 0x2, 0x8, 0xfff, 0x5, 0x7, 0x3, 0x12e7, 0x6, 0x80000000, 0x7, 0x7ff, 0xfff, 0x7fff, 0x3ff, 0x6, 0x38b, 0x3, 0xda7b, 0x11, 0x1, 0xfff, 0x9, 0x3, 0xffffffcb, 0x3ff, 0x1, 0x3, 0x8, 0x9, 0xfffffff7, 0x9, 0x128, 0x100, 0x7ff, 0x80, 0x5, 0x9, 0x4, 0x1, 0x48, 0x1, 0x6, 0x400, 0x9, 0x1, 0xd, 0x3, 0x7, 0x3, 0x40, 0x0, 0x10, 0xfffffffc, 0x7, 0xdaf, 0xf2cf, 0xda79, 0x6, 0x1000, 0x5, 0x8f, 0x5701, 0xfd7, 0x7, 0x9, 0x4, 0x80000001, 0x9, 0x9, 0x6, 0x649, 0x7, 0xe, 0xc, 0x9, 0x37400, 0x3679cbb3, 0x0, 0x839, 0x7, 0x3, 0x3, 0x80000001, 0x180, 0x6, 0x2, 0x3, 0x2, 0x2, 0xe0, 0x7ff, 0x7, 0x7, 0x6, 0x2, 0x4, 0x5, 0x5, 0x8, 0x1, 0xc, 0xfffffffd, 0x0, 0x101, 0x0, 0x81, 0xf5f5, 0x3, 0x18, 0x1, 0xd9, 0x10001, 0xa27, 0x4, 0x101, 0x37, 0x8, 0x95, 0x5, 0xff, 0x7fff, 0x2, 0x3, 0x0, 0x1, 0x6, 0x401, 0x100, 0x1, 0x8, 0x8, 0xfffffff3, 0x3ff, 0xe9, 0x4, 0x2, 0x3, 0x6, 0x4, 0x9, 0x2, 0xffffff80, 0x0, 0x9, 0x5]}, @TCA_HTB_CTAB={0x404, 0x3, [0xb31, 0x8, 0xf13cc87e, 0x5, 0x40, 0xffffffff, 0x5, 0xc65, 0x6, 0x1, 0x0, 0x0, 0x4, 0xca02, 0x8, 0xc7d, 0x0, 0x3, 0xe, 0x6, 0xff, 0x4, 0x8, 0x5, 0x2, 0x7, 0x6, 0xfffffffe, 0x1, 0xb64, 0x2, 0x8, 0x5, 0x4, 0x6, 0xffff, 0x3, 0x1000, 0x2, 0x40, 0x456, 0xffffff01, 0x2, 0x80000000, 0x9, 0xe5, 0x8001, 0xc87, 0x8b04, 0xebd, 0x8, 0x9, 0x200, 0xcecd, 0x0, 0xc3e1, 0x5, 0x195, 0xffff, 0x7, 0x3, 0x1, 0x8, 0x1, 0x0, 0xd2, 0x7, 0x9, 0x6, 0x9, 0x6, 0x6, 0x1c, 0x1, 0x8, 0x6b, 0x5, 0xe8c4, 0x8, 0xe4, 0x2, 0x5, 0x2, 0x2, 0x5, 0x1, 0x80000000, 0x1, 0x101, 0x7, 0x8, 0x3, 0x2, 0x3, 0x7, 0x2, 0x1ff, 0x4, 0xe, 0x8000, 0xfffff7a8, 0x6, 0x0, 0x0, 0x800, 0x9, 0x0, 0x3, 0x2, 0x7, 0x1776, 0x9, 0x7, 0x4, 0x3c000000, 0x80000001, 0x7, 0x1, 0xfffffffb, 0xb, 0x5, 0x800, 0xbf9d, 0x3, 0xc35c, 0x2, 0x9, 0xffffffff, 0x4, 0x2, 0x7, 0xfffffff8, 0x4, 0x0, 0x4, 0x7fff, 0x24c9, 0x7, 0x6, 0x40, 0xffff0001, 0x7f, 0x1, 0x5, 0x3, 0x7fffffff, 0x1, 0x40000000, 0x0, 0x1, 0x9, 0x3, 0x4, 0x1ff, 0xffffffff, 0x8, 0x4, 0xae, 0x9, 0x78b2, 0x9, 0x9, 0x0, 0x1, 0x3, 0x6, 0xfff, 0x1, 0x7, 0xd, 0x5, 0x10001, 0x5, 0x2, 0x6, 0x6, 0x9, 0x0, 0xff7a, 0x6, 0x10, 0x35, 0x80000000, 0x1, 0x65be, 0x7fffffff, 0x5, 0x7fff, 0x5b3, 0xf378, 0x3, 0xfffffe01, 0xdeae, 0x9, 0x66, 0xfffffffc, 0x1, 0x4, 0xbb, 0x687, 0x7, 0x4, 0x4, 0x40, 0x2, 0x4, 0x5ade, 0x6d6, 0x1000, 0x2, 0xd, 0x6, 0x4, 0x0, 0x0, 0x80, 0x4, 0x7, 0x160171f8, 0x7a0cf728, 0x6, 0xfffffffe, 0x3686, 0x5, 0x3c0, 0x261b, 0x6, 0x9, 0x7, 0x82a, 0x4, 0x4, 0x0, 0x0, 0x3, 0x800, 0x725e, 0xfffffff8, 0x0, 0x6, 0xd33, 0x3, 0x7, 0x7fffffff, 0x2, 0x3, 0x9, 0x800, 0x9, 0x1a, 0x7, 0x7, 0x80, 0x101, 0x80000000, 0x7]}, @TCA_HTB_CTAB={0x404, 0x3, [0xa, 0x7, 0x9, 0x0, 0x3, 0x2, 0x80, 0x9, 0x7ae, 0x0, 0x101, 0x1000, 0x9, 0xff, 0x10, 0x2, 0xffff9d94, 0x3, 0xd6, 0x0, 0x891, 0x7, 0x827d, 0x4fce, 0x3ff, 0x81, 0xa5a, 0xa, 0x587, 0x1, 0xe, 0x7, 0x9, 0xfa2, 0x4, 0x9, 0x7, 0x7, 0x2, 0x8000, 0x1000, 0xffff, 0xffff, 0x4, 0x101, 0x4, 0x0, 0xfffffffa, 0x0, 0x2, 0xbd, 0x3, 0x7, 0xfff, 0xfffffffb, 0x1, 0x1, 0x5, 0x2, 0x6, 0xb3, 0x2, 0x0, 0x5, 0x8, 0x3, 0x5, 0x8, 0x9, 0x4, 0xc0c, 0x2, 0x81, 0x6, 0xffffffff, 0xe, 0x6, 0x9, 0x200, 0x3c1e, 0xfff, 0x7, 0x2, 0x1, 0xdb1, 0x0, 0x0, 0x7, 0x0, 0x7, 0xe5d, 0x4, 0x1ff, 0x0, 0xfffffffc, 0x2, 0x5, 0x8, 0x9, 0x9, 0x9, 0x2, 0xa, 0x6cd, 0x0, 0x874d, 0x0, 0x6, 0x0, 0x9, 0x3, 0x8, 0x7fff, 0xff, 0x6, 0x8, 0xa3578b2, 0x1, 0x9, 0x8000, 0x6, 0x2, 0x5, 0x9e, 0x6, 0x100, 0xffff2593, 0xffff8c3a, 0xfffffffb, 0x32d, 0xfb, 0x0, 0x6, 0x7, 0x7fff, 0x9, 0x8, 0x400, 0x0, 0x8001, 0x7f, 0x7fff, 0x1, 0x5, 0x800, 0x3, 0x4, 0x843, 0xebf, 0x3, 0x10000, 0x8, 0x1, 0x8000, 0x1, 0x4, 0x7, 0x3, 0x9, 0x9, 0x9, 0x4, 0x0, 0x7, 0xffff, 0x1, 0x1, 0x9, 0xb2, 0x1, 0x5, 0xfff, 0xffffff34, 0x0, 0x4, 0x3, 0x6, 0x4, 0x6, 0x53, 0x39, 0xf10, 0x6b0a, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x80000000, 0x10, 0x3, 0x0, 0xffffffff, 0x591d, 0x4, 0x0, 0x4, 0xfffffffb, 0x9, 0xc9c8, 0x3, 0x3, 0xfffffbff, 0x28a1, 0x2, 0xfffffffa, 0x7, 0x800, 0xfffffffb, 0x7, 0x4, 0x4, 0x74b7a1b, 0xf, 0x1672, 0xa, 0x800, 0x6, 0xfffff53f, 0xb, 0x6, 0xb622, 0x4, 0x5, 0x3, 0x6, 0x2, 0x0, 0x9, 0x0, 0x8c4d, 0x7, 0x7, 0x7, 0x9, 0x3597fcd1, 0x6, 0x5b1d, 0x5, 0x80000001, 0x2, 0x4, 0x1, 0x6, 0x10, 0x2, 0xa2c, 0x5, 0x7fffffff, 0x4a000000, 0x0, 0x1, 0x100, 0x8, 0x54, 0x7fff, 0x4]}, @TCA_HTB_RTAB={0x404, 0x4, [0xd, 0x0, 0x4, 0x2, 0x400, 0x0, 0x6e9, 0x1, 0x81, 0x3, 0xdea4, 0x9, 0x2, 0x7fffffff, 0x7f, 0x0, 0x10, 0x1, 0x80, 0x7, 0xffffffff, 0x0, 0x4, 0x3ff, 0x5, 0x0, 0x8, 0xa, 0xd, 0x2, 0x9, 0x4, 0x7ff, 0x1, 0x8, 0x5, 0x2, 0x922, 0x0, 0xdb9, 0x2, 0xfff, 0x889, 0x2, 0x51a4586e, 0x3, 0x7, 0xbeb, 0x8, 0x4, 0x6, 0xffff, 0xc9a, 0xfffffdaf, 0x1000, 0x10001, 0xf54, 0x8, 0x7, 0x100, 0x581f, 0x8, 0x4, 0x8, 0x4f7, 0x9, 0x7, 0xe3b95824, 0x3, 0x40, 0x2, 0x58b, 0x2, 0xfffffff7, 0xff, 0x1b, 0xa3b7, 0x80, 0x6, 0x10000, 0x218, 0x7, 0xfffffffa, 0x30, 0xca7, 0x7ff, 0x3, 0xfffffffc, 0x2, 0x8, 0x7fff, 0xf, 0x8, 0x8, 0x7, 0x80000001, 0xd6db, 0xfffffffd, 0x401, 0x800, 0x3ff, 0x6, 0x32, 0x0, 0xff, 0xfffffffa, 0xffffffff, 0x4, 0x1, 0x9, 0x3, 0x0, 0x1, 0xfffffff9, 0x5, 0xfff, 0xdaad, 0x203, 0x5, 0xdeb, 0xf4cf, 0x38, 0x1000, 0x6, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x2ef, 0x9, 0x198687b4, 0x7fff, 0x8, 0xf, 0x4, 0xfffffbdb, 0xffffffee, 0xc, 0x3, 0x40000, 0x8, 0x7, 0x5, 0x6, 0x8, 0x12e4, 0x9, 0x7, 0x400, 0x6, 0xffffffff, 0x5, 0x9, 0x3ff, 0x7, 0x9, 0x100, 0xfffffffb, 0x2000000, 0x1, 0x9, 0x3bd, 0x200, 0x6, 0x1, 0xa, 0x1, 0x7, 0x80000000, 0x3, 0x0, 0xb5, 0x180000, 0x0, 0x400, 0x2d380, 0x62f, 0x7fffffff, 0x1, 0x3, 0x401, 0x5, 0x6, 0x9, 0x4, 0x2, 0x3, 0x9136, 0x2, 0xffff, 0x7, 0x7f, 0x4, 0x2, 0x1, 0x9da, 0x1, 0x423, 0xfffffffc, 0x7fff, 0x8001, 0x3, 0xffd, 0xf21, 0x0, 0x8, 0x7fff, 0x6, 0x41, 0x5, 0x7, 0x7, 0xf3, 0x7, 0x4, 0x1, 0x0, 0x4, 0x31, 0x2, 0x101, 0xb67, 0x80, 0x3, 0xe, 0x2007, 0x1ff, 0x1b2, 0x8, 0x8, 0xd2, 0x3, 0x401, 0xd0, 0x0, 0x2, 0x8001, 0x10, 0xff, 0xb3d, 0x9, 0x4, 0x40, 0x0, 0x401, 0x4, 0x6, 0x10001, 0x8, 0x2, 0xe21, 0x7, 0x5, 0xa]}]}}]}, 0x1040}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x4020aed2, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmmsg$sock(r4, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="86d5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)="c337", 0x2}], 0x1}}], 0x2, 0x1) 18.142171345s ago: executing program 1 (id=2627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="3d0536801061c32a8229ad1406", 0xd}], 0x1}}], 0x1, 0x200488d0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000740)={@private=0xa010102, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) dup(r2) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r6, &(0x7f0000002540)={0x0, ""/4096}, 0x1004, 0x0, 0x3c00) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000206010800000000000000000900020073797a310000000005000400000000000c00078008000648000000000500050002000000050001000600000000000000"], 0x44}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 17.650354694s ago: executing program 2 (id=2628): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000", @ANYRES16], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x340, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) 9.240012417s ago: executing program 0 (id=2631): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xb, &(0x7f0000000480)={0x8, 0x8b}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000640)="9abe48978fc9d6d504d0c9f79768e69abc0d908c4b7714017340a5321e2091ace2f33de355e62b927a1ab681a738f2e4e6d33ce721479d3f68ea12ef5aeb17d903d95cddeb4e2754b78802e05f584c7ab407fc85efe9ab6d650e5eccd789e1e414ab7501f7fb6fd6404b0afab9d4c2078d1030121824daf273d8c33dae1bc50bf1d39fb4f04a10d235dd987de873824c5f97fc33c2e3fde23491dd6d53930ce1c914bc1cc17642dffa0933942972a97ea96b886ad243f6d5378f5d70d8379f5a316ec6c623a6a08674f92554652a32193775938997cb6b24d8355b79860057ea077f62b64ffbd9a886bf7ec98453e6a4792ea0882f8c1e1be8a4b699f4560545c55002fc6f2039736619ffb2c30f946ad7ca29bb4dc823c771b85d812e3f1bee51b20cd8e365a88fda649df477f1f3a1a7c60d0a4c875973658fe25ecb5d45e95dc7cb07f79b0dc0a78bff47ad5ccd5ab5dfc8ba2a8a48572c840fbc134628f698ac267d0eb5d52d37b1927ea10a15efbe12a926e22be39c4c6431b528fca59208b192939f1a4167d613d1fef58e30363112dcef611692353615a2bda0af0bdd5884045f748771b7c8ea5d82d31d048832995615bf68b51370d41a7e4db8cb3970066b6f9e9a55a7c8e41bff4a436ad7b0631250af307a0af8d0d72d7394421f4de5ac2918583f07d92c32d17098f20834ac2ba6bb39d504af6fe664be4e436ba30c885680d58a4ae70c680d553e15ac6c3d1f6b7a6ef99358c948a6c1b1db07c40d2a0b5c7b3c420ee63ee66117175b12ff259783f4cfa8bf5110b96e8417180cd8a413c23659033f8f1857e00df8de16041101a8166411c893af3f00b0596718fe76578301604d27f67ba625fae0e404293872f523b7496ddde4b09f33b7f7e3fcf6fe0d0ebe5eb603e5d8ed1ae18c654498b3db3c59aa51e8022ce90d6834108df0c73e886b49be39f60116ec2ac0e5540af3491ff4d6c526b6350bb5021933a79b4e102f3ff65f7bced45210bf5849a0188493798dc87f8b22ca1b104f5caa5018029bbf03afe7904dbfa0f5e1a2b74a196e0d153b7498b69986657c79bb1df1c9ed1dfe19d00de2040fd668ccedd62c775a9976aac1d9447d4045f499461a320443111bf56d8d7e1dadd1f4ca137c5796c2d7c8a015786a5fc5e7b9021eda74b575925d9d55683e1a940c55299046ac60d49fe05141a7f5280cade653bd2f19018121e18aca2ac846734e941b313242b9c41fa7c8d2058577aae640e8319710021cd89eb291ae0ad15ba292d45ebef0074386668123ed9961b13633043f54314c8f4fe8fc0036512fb088b6671e13d8481b5286e098cdcdf509473ee3c36c0cd218a81f4c2b8758a5573f21a5c12cdcce7e79f4cc8b5a9030f7d0f8a2c809db34b89ed5e063db518a18584c46806f863f7a192df439c5894eed6facd33927bbaa8df57ecd045ef6386ca46a05ab5573068955d21289a4286152c8a2a13df3429b16f4ee1d73a6f544c784b0cc49aa2c83b3738c25ee3d64ac9142131318f82981ae1a17d07941aa3bd05dd9c136cb061a71ae67614dc44ea2d9e350c0cd9dce03e0aa292b384e0f037e4bc392bffb4e847cf01b74e394736f08242a9ce03e5c4e163f5cead6b8446bd9c1fe9bfb31bca88511a74671e2bec33fe0b9aae1376303c979df69c0b305f042bf2e111b446533f4a6b3fac594e5903061e21e7f1c8a30cc1cb3d3078e48741a032723e7eda57fc83c6068ba086b08448af61988bd22dbdb8c3752828f40691e12b284080da18f0ff5f87f324cde7d7325c181560e5f4e7e028476b372bb8b64da996db88e31aef3acea54932b152b4422a6833853f0c217b895c8710473fcb36288faeadd0bc72f8f81b79cffc9c05fd8d30c769ac22f1e72773b0c7e8b234d8624b6cb6311978ec4568b692fda31a04cd795de2794f3376fc7376e30c85d7942b03d97f915289c5754eb057dcb504872e409acf1ff929698e5890161b12140fdef3d1838d41e25dfe0716241170a5392c31d766fe6313ae2aefdaeaffd53d0940949f18d9737a2aacb2111b6dc129e2812eb403446e655d5317e258eda59dfc57d1351c2d64e5074e485d98c06f35b5aec59baf8efc15866eef217c5dac6aad75f55d779c56662420d5b401bf0f19f5217f2d9395931def8f1f8b5847c8f052a8cdf942f567ba004e21c448067c5d2a3bd5cdac560495712f916dcebd06d6b65c767af15216e3c0b84212202356accac045004c612c4660470e593ed89e219ac1f547cfdda3c484b67b00096cd7993fa5a5ddd860d9e8d0c915aea5f6847d50a5283ea522e1d490a8151dc96911a261be4ed30da952b1d8b74c891fac193d5f83f2eb3d974b20523bdd3c7660e42635410073642b983393caf59b20d7ce8682c54fae87d8a57dfa243fcc2fd52d7372155d7e7bf9078e1ccd5046f21b95a5d61bbd1e78fb9c3d6704a141298fde37d09615d51ad10ec8eac5ebb3d1df8e0b559f6e88a77a074d2ffad60d4d58819a76482408c3a7c8edf41abce0f450c33b1cd6432363e6c4ed892f2b78d9b14acf0e8490cfb1f60229753d8eaab8df582c9fac7a54980442985b87bb41e47f415f8617e5025d2f1fdfa745e07b0626b547c7f310d5da65522b95e84a231716afc07da2d7562dc4b583fcdc21a22bc2132532c6713ec0e35004b78612585ff8bac697c8e8ad6da1545d6dfd2f3564f92457dae15cfcb3ca1c4ba9f4210c75bba216ca805b6c8760892257d5ec95252895bc9870adb6b47da48478fc718898c3e1d353fc233227d71c2c7a7dab22c8a5acb19e75eecd1fce82dcf36b7da813b7102cd426a67c3e721505bbcfa4c76c4b93ee06c477a9526cc36cb6e1ec0fc55284c7379766d5771a8db5781fd5b10d22959aeb1ae73ce24721f39aa62bc84ec58ab5cc3b9a5677c25c2240911184667f4f3726efb9aced16eb0967bd9b177b18050dcb554829d38419c8f74aa9279f90e9fec58b755c9ea38533f07d09e23a1540ba794710a46b7d7341aab573a26ad01702794b9c2a5b957ec5d22ea079b8a81f4d6108941d84c588c13458e3d10556df61231e43ea0f84851515b00f4f68cb95ff182fe1a95dd0007c92a84d5fe503dd3cd8bfd81b3a2b351de8d2d5f6020cb1d5523e5e76278e66755d9e9b278f1d4142887c3ac85509abbcc49f8b649bda581e6fdd58fc7662705b843fe49d543cf46fb0c701e41379927731890c1b284071d92f1747dbc4fa906727bc8d0ce783d9079c7735eebe2c9887d9b7ebf5862a9607a038895325f9c54ec0faed2dd3d46b50c1795a1342140fc326e1e24b0434b72fdd3cc4d48dfbefd5df53716cf709235a9d39ddff93ead149c3cd57f680212b5036e99439046791795ead6dfe330d405d90bc6a849b305b0c60d62e4d53b5af25870a0b5e105dcee40360d9594900c4aef9db5d2c11d76de448ff9ad85046a655890820a1092f643c5af63b05762e036df228f5cc0ea00b9664dcdb647684d45aefa01605dfffbf31ea1a7501b82521f49bd36d1f5977932e0b6fe6eb2039e3d91b6129a879b96719a9f3c4e05dc02222ffccca0cb682be2a4fb54c5a590653cef00c2399449cabfa4d2e2e3143ce0d0a49dcddfc59697f0953a93515d0c9672d03bfa96db5ca4902f584eaa4ab32ec348d9f059921b8d6c8ba3e9300e4f4014f8777f588856729bb82dbb95e96a812bde444d62731415896c7cb6336cf8bc05ae1f40f550a21905969a98e551925bc167b1e267670266b3c2f8a75acb3cdb30c993b02e246e7629bad825a84cca2fcc60540a6f8750b6736a19e8854715e0e900431f530b03ba0552ef2272a693a357bd0fe64bf549e5354b954d8651ab6d87cb512dd613981e1a65bd87f36448d974d967bda619b5ec581508a842db9c77292fd2fe0f1e4d248c786ef40fc41ffab06f75f4b293cfece7cd9a9433dabf3cf4a42e16617ecc70f40d28d15316e26433c7ed8276db489ba94cd2314203e05936f48a842f57acfeecc97fec0c433121bef994e780e6761771d9280e9868f03415c11d68b7c0ba2046b089ecbf73de963b206895c090227ee6b348ee6d1af087141c52c109b11c1a8805344c84aca98835cc227e2bd8192a97a11559f048fbf3d6c5ef4714c7045652c271ca859812f1e8485e34e550646aa898d8fcd6ec973c2ca02da1524f454d1468a130b7f6da4a8abc9e221991b9185742276e8a75b949a7c6565276926f617b20217531b626b1479392f9768a1848e528c7a25d2fbe3a32e47a1d9eabf5a32c8e239e3cd3e8e666c6e5a5c02c942b691b721b79142f855240f18005458913b297304beb95bbf61c17348ad74c7f86d642dadf18bc6328122ec84de076d73bb94af4224cc556ffa3f32b5c7ac7d0dedea3c8ee9f0fe16fb2740b2e6e1b7de8b210167614756b1264118dbe3420eb9cc541054f914fd91a853be3a12a0a5be123b8962b02aafac12cb1e931879f480cb0c29885aa91421c5971c7b85a887ca95aefefbfa3a476be3bafb549d92f5471e1f6aca1d9d4d826ea5fc7b7bc3cc20023d6536ee5406ec21b71ed8f146765cfba901ed59cafb2dff9aafd9373bbabbfaff1da0dbf1dd07ab058a8beba78f9222373c87b416d92567ada44c01de4004202bd4d70ee285e8b9b86efeaa5ef62680e4676a8e651b3d1e6aae639b1c4e79a7e583de5c10db7864261273d754e2abf5e47e4b79c970243c16d440a9e6f6b99eb94c9ce436195d7017aeb6f6695622f51c2f237fee93c7f2f76f13a7bc8eb5d574c97d7b2be0a91de2869bec13e0765b54ca44951d4b15fb79228ef3d0090e0aaee13586674b40ce272be597d72a5042ef5ead82fe20331b5b6361889339e35d62fafa4c9dbb20016ed58479fd0a0ee8382fe872894d98b7f59186d0994509a216be36b15b76a134752f58748debaa9b36bc4c188d5c782df6d32f6403082edd4eedda2814638e8ac1b28286b8ce54360c44acb55bb10a73fa09fbd86bfcf4ce4943e4d14535f7a9fd80e2911824fa9dadbba245d85658a2bc827423aea3d76d0af762e9ec09c3e8e84cdffca6bdc3edca6c6c85a7a565e4c99b49dd0e4afa6e07fbd156dc2484ad65366ba94b7b751c1b33627fd019cc7bc7c98891b5b398ebe74612f0ae6d0a246151cb26610f45479c96811ebe1435cd2d0a86f034b51b9fce59790de0ccbce77ec1dff3cbc87672284cd2c14c99cc73aaabf9ecf54ad5f4f2218379e85e2a724e013b0df5a117cd89f1d4eb4aa4a6575211bc7621cb852fe9af913fc93a73d9d0d184d8df53115dc26bb75bbeed2f04f2af42092a3c0dd624a97c76b8397f433c89fb996893d32af6d748733c463925973d482b1e83640334f84ee70cb7a4c57f5e979eddb30b14290361721ed7949da6690cb65d382727f2d499f64cb4880fb19573ca99fbaf706ef8413de519f96e88b1840bb762a8c2fb7b386e62af507b7f5586f16ca06d319a8fbfe830019c2241a14849f94f9b90e0f2325505c8d374eab673d797dc447d5351d4781beb7b64c2d4ecd764daa72adb7ae291ea36886bef90d1ebe2e0ab001e09c3427e14f8d3bbbf6bb6fa85672fcec53108daaa19e41251a26343184ff2142591621da04111d161a8e78cbb769c97077d00dbe3c298edfe0dd056a816e9ea3e34ae7aef35ed0c5fd554e1ed5db03ef7f22e970fab4620e84729337a8eed24c23c6aa6fb44caa69e128ed35be14625f123d62e6c4797fb2bb735351d7bac231d7ac824956faa56f62f30d3d", 0x1000}, {&(0x7f00000002c0)="26fc4bcf8b00c19cd0eed8b61f7c76de44eed2752c4d27ee2e10986d2b", 0x1d}, {&(0x7f00000016c0)="507a820941f6d234a757b2de2fe516eb6857f51051e27bb99b33442507ee3dd395c93381abb5e6b9ff76eea128b6f395f74b64bc081efc463b192c1838538c8719738008a475867fbfbbc6ec08fd12649b7402b4207297de026ed4ea30bef60af76f2b26e1a2768a7226f918253314511129725d1bdaaf35826dc04373837263fdf17c4b2639c8819e6d203132313600000000000000", 0x96}, {&(0x7f0000000200)="57247d533633c256b37c6a4aedc53a12d585f860d01b94eb8637345f22ac54c74196f711eb84c14c8d", 0x29}, {&(0x7f0000000240)="be1ac182feb197b37fadc7e8ad4b3a9a9b791e900ba3d654bb44d4402987f407bdbcefe93f535279d99bb839a1", 0x2d}, {&(0x7f00000004c0)="91f0807b6afddf80750c5a560c2081f08de8a721aa5e3cfd5a6bc6cabda994bf8693656d03e1ecd9d468f2d4bb42292991d19fba6097597c9e6f16fdcb2b551f2bfeaaf98a60bc01df68984cf336e2d257b29840e3adfa847b5f420ea7b5e4d1545ae88f63dfbb3ecdfa6633997cbaaa79e2ada80941ed932cbd7a0b11325041f526151f6be00828495864ad9f61c009821728b246b5957891caf322b4a8c97874073ecf48e0cde8e05ba00619d7d90907550d123307265ef06a5ba4a640b82641a834e2684781e4b3e0a93e8d25795a7949e0864c40b8396a01a59b509e34ef484c938c3a677a072a4fba", 0xeb}, {&(0x7f0000000380)="da197b797f881179427938052c82338857b905130b0dbf1a5642f9fb85283456df5e700384b82459d02ba33cb6ca0a59cbebd1b6d5dce0bec09b0f97ceac8f3628477bfae6b744bea41eb181eb3c2bb6e7988b85dfdd30b3b57f78e93ea2fe8cc8260e04a8ca76c13f01f0b1dec49a1b2511e2ef1fc4cd7293de1782ba5a48f467f585d8278948ed2f36c0d63b5c05ce23115c581193bef5aa45883c0e5c86cace83861b2e035d3f75d15cca031a94586136f7243fdea6dcace1dc4dd2121efae4e3a58d3f915bcff94168e9ff1509cef74ca0e5577b", 0xd6}], 0x8}, 0x20000800) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 9.239874328s ago: executing program 1 (id=2632): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r2, &(0x7f00000004c0)=@xdp={0x2c, 0x6, 0x0, 0x28}, 0x80) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x78) sendto$inet(r1, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) 9.212531513s ago: executing program 2 (id=2633): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nmem0(0xffffff9c, &(0x7f0000000100), 0x264742, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040600"/20, @ANYRES32=0x0, @ANYBLOB="2102000000000000240012800b000100677265746170000014000280060003003900000008000700ac141421"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0xc0000, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="84000005", @ANYRES16=r3, @ANYBLOB="000828bd7000fedbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00020000000600110000000000"], 0x84}}, 0x8001) openat$uhid(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x6a, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0xaa002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000180)={0x2, 0x1}, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5061, 0x0) r9 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "4c3013002c62a76f2eabc49fd5430ce6c7d45d7444c96cef9cbf633264e7a7625682b4"}, 0x2e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 9.01178997s ago: executing program 1 (id=2634): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)="546282255991", 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x12, r1, 0x0) 8.718891718s ago: executing program 1 (id=2635): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0019001000000002800000121f", 0x2e}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xffffffffffffff2f) (async) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xffffffffffffff2f) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x820000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000001200,allow_other,blksize=0x0000000000001400,allow_other,max_read=0x0000000000000005,max_read=0x0000000000000009,blksize=0x0000000000000000,nolazytime,obj_user=,appraise,euid<', @ANYRESDEC=0x0, @ANYBLOB="b1f9"]) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x820000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000001200,allow_other,blksize=0x0000000000001400,allow_other,max_read=0x0000000000000005,max_read=0x0000000000000009,blksize=0x0000000000000000,nolazytime,obj_user=,appraise,euid<', @ANYRESDEC=0x0, @ANYBLOB="b1f9"]) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xc03}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000017c0), 0x4) sendto$inet6(r4, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x20, &(0x7f0000000340)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000540)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x20, &(0x7f0000000340)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000540)=0xc) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) dup(r7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r8, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) (async) preadv(r8, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 6.282902528s ago: executing program 1 (id=2636): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) (async) dup3(r2, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'xfrm0\x00', 0xae95}) ioctl(r4, 0x8b22, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x4a8200, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) 6.049964484s ago: executing program 2 (id=2637): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_procfs$userns(0x0, &(0x7f00000002c0)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) writev(r3, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) syz_clone(0x8a008600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x8a008600, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0xff}, @in6=@private0, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x3}}, 0x12b) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) 4.051475032s ago: executing program 0 (id=2638): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) iopl(0x3) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x9, 0x0, 0x4001, 0x6, 0x0, 0x4}}) writev(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x5f) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.793356702s ago: executing program 0 (id=2639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2d, 0x2, 0x81, 0x722c, 0x2, @mcast2, @local, 0x10, 0x700, 0x1, 0xb42}}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000001800)={0xffffffffffffffff, 0x6, 0x45e3}) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x1f0, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000000), 0x0, 0x0, 0x6}, 0x4c) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000440)=0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGBITKEY(r8, 0x40044591, &(0x7f00000001c0)=""/208) syz_emit_ethernet(0x16, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESDEC=r7, @ANYRESDEC=r0], 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000080)={"aba7155f13fd8625a8335faf2cab85a1", 0x0, 0x0, {0x4, 0x6}, {0xfffffffffffffff8, 0x1}, 0x6, [0x8000, 0x2, 0x53f8, 0x3, 0x2c39a2ed, 0xaa9, 0x8, 0x5, 0xb, 0x7fffffff, 0x0, 0x2, 0x8000000000000000, 0xe, 0x2282]}) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r10 = openat$tun(0xffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x20) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r9, 0x5000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000140)=0x7) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0xb7) write$tun(r11, &(0x7f0000000080)=ANY=[], 0x6a) ioctl$VIDIOC_G_FMT(r11, 0xc0cc5604, &(0x7f0000000480)={0x9, @pix_mp={0x10000, 0x827d, 0x4f565559, 0x0, 0x2, [{0x5, 0x710d}, {0x0, 0x1}, {0xb3, 0x64}, {0x80, 0xee}, {0xd9, 0xfffffbc6}, {0x1, 0xba1}, {0x6, 0xffffffff}, {0x8}], 0xb9, 0x80, 0x4, 0x2}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r8) 2.734364573s ago: executing program 0 (id=2640): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}}, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xd, 0x1}, 'syz1\x00', 0x55}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYBLOB="df4800000000000018000c0000002c0003802800038014000180080001000200000005000200000000001000018009090200866974030000000018000180140002007369"], 0x58}}, 0xc000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e010100"], 0xf) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) socket$inet6(0xa, 0x2, 0x403a) r8 = dup(r4) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, 0x0) syz_open_dev$usbmon(0x0, 0xf231, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000011800000018000000090000000000000001000003075d961e30443a1ce5f6f97cd1784c7d2a2303f2462fbdf2fbe8fbbf82b02a047ea1534dfc4223a81a66ae3913c0369f396de90e"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0xcc71, 0x800}) 1.462005433s ago: executing program 2 (id=2641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="3d0536801061c32a8229ad1406", 0xd}], 0x1}}], 0x1, 0x200488d0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000740)={@private=0xa010102, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) dup(r2) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r6, &(0x7f0000002540)={0x0, ""/4096}, 0x1004, 0x0, 0x3c00) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000206010800000000000000000900020073797a310000000005000400000000000c00078008000648000000000500050002000000050001000600000000000000"], 0x44}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1.461717075s ago: executing program 1 (id=2642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) dup(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400), 0x0) getrandom(&(0x7f0000001d80)=""/4063, 0xfdf, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0080007f0000c10000000800000000005000"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80015b18, &(0x7f0000000040)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c0c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1, 0x0, 0x33}, 0x401c801) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.222107312s ago: executing program 0 (id=2643): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(0x0, 0x14507f, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000001000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) socket$inet(0x2, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, &(0x7f0000000440)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x3a000000}, 0x0) 0s ago: executing program 0 (id=2644): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6erspan0\x00', 0x1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0xd, 0xff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000, 0x1, 0x3, 0x1}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xff, 0x0, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000e60000010000000000fedb2ce8000000000000000a0800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r3, 0x0, r5, 0x0, 0x114, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000009c0)=@md0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='befs\x00', 0x800, &(0x7f0000000a80)='*%([#+\x00') fcntl$setpipe(r7, 0x407, 0x1000000) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000000300)="10", 0x1}], 0x1, 0x0) write$P9_RMKNOD(r2, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000033240)={0xaaaaaaaaaaaac9c, 0xd, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000000200)=0x80) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="100027bd7000fedbdf25750000000c00990001040000400000008400f0800a0002008129fbd680de00000a00080008021100000100000400090005000700800000000400040035000b005dcf7224d32a87cb839dd684fc8c392b222566082f454356caeeb74897adf125ac65bb4767cc45959bf3b307a57e0e5b580000000a000800ffffffffffff00000a000800080211000000000005001000050000000400f080"], 0xa8}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x8, 0x4) r11 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x408002, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) kernel console output (not intermixed with test programs): 1729721786.670:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 626.942522][ T39] audit: type=1326 audit(1729721786.670:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 626.962575][T10075] usb 2-1: new high-speed USB device number 7 using ehci-pci [ 627.853364][T12358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1654'. [ 627.887025][T10075] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 627.890028][T10075] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 627.893218][T10075] usb 2-1: Product: QEMU USB Tablet [ 627.895257][T10075] usb 2-1: Manufacturer: QEMU [ 627.896869][T10075] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 627.937399][T10075] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000F/input/input25 [ 627.943588][T10075] hid-generic 0003:0627:0001.000F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 628.106715][T12367] 9pnet_fd: Insufficient options for proto=fd [ 628.158973][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 629.301828][ T8349] Bluetooth: hci0: command 0x0405 tx timeout [ 629.804088][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 629.806470][T12389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.808557][T12389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.826803][T12389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.830151][T12389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.954349][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 629.974018][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 630.042137][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1665'. [ 631.062679][T12418] 9pnet_fd: Insufficient options for proto=fd [ 631.237982][T12422] netlink: 'syz.0.1671': attribute type 2 has an invalid length. [ 631.256259][T12422] : entered promiscuous mode [ 631.617246][T12424] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1672'. [ 631.928881][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.931085][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.028083][T12430] syzkaller1: entered promiscuous mode [ 632.029975][T12430] syzkaller1: entered allmulticast mode [ 632.124537][T12436] kvm: pic: single mode not supported [ 632.124888][T12436] kvm: pic: non byte write [ 632.128006][T12436] kvm: pic: single mode not supported [ 632.128244][T12436] kvm: pic: non byte write [ 632.132239][T12436] kvm: pic: non byte write [ 632.133907][T12436] kvm: pic: single mode not supported [ 632.134429][T12436] kvm: pic: non byte write [ 632.137674][T12436] kvm: pic: single mode not supported [ 632.138378][T12436] kvm: pic: single mode not supported [ 632.141074][T12436] kvm: pic: single mode not supported [ 632.149215][T12436] kvm: pic: non byte write [ 632.163098][T12436] kvm: pic: single mode not supported [ 632.164379][T12436] kvm: pic: non byte read [ 632.183648][T12436] kvm: pic: non byte write [ 632.187788][T12436] kvm: pic: non byte read [ 632.189610][T12436] kvm: pic: non byte write [ 632.191656][T12436] kvm: pic: non byte read [ 632.196531][ T39] audit: type=1326 audit(1729721792.020:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.0.1676" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 632.204296][T12436] kvm: pic: non byte write [ 632.206840][T12436] kvm: pic: non byte write [ 632.208892][T12436] kvm: pic: non byte write [ 632.240459][T12447] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 632.243335][T12447] netlink: 88156 bytes leftover after parsing attributes in process `syz.3.1677'. [ 632.295139][T12448] Bluetooth: MGMT ver 1.23 [ 632.298830][T12446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1678'. [ 633.177309][T12462] netlink: 'syz.1.1682': attribute type 21 has an invalid length. [ 633.635924][T12470] 9pnet_fd: Insufficient options for proto=fd [ 634.203551][T12473] netlink: 'syz.0.1686': attribute type 11 has an invalid length. [ 634.343825][T12482] openvswitch: netlink: Actions may not be safe on all matching packets [ 634.416880][T12484] netlink: 'syz.1.1689': attribute type 4 has an invalid length. [ 634.419777][T12484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1689'. [ 634.483569][T12485] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 634.492100][T12485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 634.494505][T12485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 634.761859][ T981] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 634.901857][ T981] usb 6-1: device descriptor read/64, error -71 [ 635.172024][ T981] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 635.362077][ T981] usb 6-1: device descriptor read/64, error -71 [ 635.472445][ T981] usb usb6-port1: attempt power cycle [ 635.787698][T12510] lo speed is unknown, defaulting to 1000 [ 635.811789][ T981] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 635.832452][ T981] usb 6-1: device descriptor read/8, error -71 [ 635.879512][ T39] audit: type=1326 audit(1729721795.700:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.0.1698" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 636.081774][ T981] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 636.102232][ T981] usb 6-1: device descriptor read/8, error -71 [ 636.212422][ T981] usb usb6-port1: unable to enumerate USB device [ 636.462392][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 637.271588][T12536] netlink: 'syz.0.1704': attribute type 20 has an invalid length. [ 637.379616][T12541] netlink: 'syz.0.1705': attribute type 11 has an invalid length. [ 637.576264][T12553] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 637.582861][T12553] overlayfs: missing 'lowerdir' [ 637.648095][T12558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 637.655876][T12557] dccp_close: ABORT with 40 bytes unread [ 638.671476][T12574] netlink: 'syz.0.1713': attribute type 1 has an invalid length. [ 638.672420][T12577] No such timeout policy "syz1" [ 638.675370][T12574] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1713'. [ 638.789621][ T39] audit: type=1326 audit(1729721798.610:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.795670][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 638.799756][T12583] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1716'. [ 638.799925][ T39] audit: type=1326 audit(1729721798.610:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.812159][ T39] audit: type=1326 audit(1729721798.610:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.818783][ T39] audit: type=1326 audit(1729721798.610:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.825102][ T39] audit: type=1326 audit(1729721798.610:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.830745][ T39] audit: type=1326 audit(1729721798.610:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.837108][ T39] audit: type=1326 audit(1729721798.610:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.843549][ T39] audit: type=1326 audit(1729721798.610:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.850178][ T39] audit: type=1326 audit(1729721798.610:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 638.858126][ T39] audit: type=1326 audit(1729721798.610:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.0.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 639.771898][ T5407] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 639.921867][ T5407] usb 7-1: Using ep0 maxpacket: 32 [ 639.928584][ T5407] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 639.931949][ T5407] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 639.940236][ T5407] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 639.949960][ T5407] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 639.955244][ T5407] usb 7-1: config 0 interface 0 has no altsetting 0 [ 639.960223][ T5407] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 639.963643][ T5407] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 639.966566][ T5407] usb 7-1: Product: syz [ 639.968147][ T5407] usb 7-1: Manufacturer: syz [ 639.969748][ T5407] usb 7-1: SerialNumber: syz [ 639.979253][ T5407] usb 7-1: config 0 descriptor?? [ 639.983064][ T5407] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 639.987260][ T5407] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 640.812008][T12630] ax25_connect(): syz.1.1724 uses autobind, please contact jreuter@yaina.de [ 641.196965][T12611] IPv6: sit1: Disabled Multicast RS [ 641.200960][T12611] sit1: entered allmulticast mode [ 641.270799][ T35] usb 7-1: USB disconnect, device number 24 [ 641.274430][ T35] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 641.317881][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.320622][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.324413][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.326365][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.328526][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.330945][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.336042][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.338056][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.340735][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.343848][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.346704][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.349391][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.353694][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.356452][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.359272][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.362304][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.365009][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.367686][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.370461][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.373406][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.376101][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.378855][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.381665][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.385314][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.388030][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.390706][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.393741][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.396448][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.399150][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.402897][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.405872][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.408578][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.411329][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.414246][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.417072][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.419774][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.422692][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.425397][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.428245][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.430965][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.433722][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.436398][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.439245][ T8564] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 641.445172][ T8564] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.09 Device [syz0] on syz0 [ 641.489911][T12641] ALSA: seq fatal error: cannot create timer (-16) [ 641.776210][T12650] netlink: 'syz.3.1729': attribute type 11 has an invalid length. [ 643.678711][T12678] lo speed is unknown, defaulting to 1000 [ 643.742470][T12679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.766987][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 644.045726][T12693] netlink: 'syz.2.1741': attribute type 11 has an invalid length. [ 645.261078][T12712] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1747'. [ 645.265441][T12711] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1747'. [ 646.128325][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 646.228837][T12751] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.231144][T12751] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.800472][T12774] netlink: 'syz.2.1762': attribute type 11 has an invalid length. [ 646.974051][ T39] kauditd_printk_skb: 50 callbacks suppressed [ 646.974068][ T39] audit: type=1326 audit(1729721806.800:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 646.991307][ T39] audit: type=1326 audit(1729721806.810:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 646.999393][ T39] audit: type=1326 audit(1729721806.810:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.009156][ T39] audit: type=1326 audit(1729721806.810:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.017548][ T39] audit: type=1326 audit(1729721806.810:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.024959][ T39] audit: type=1326 audit(1729721806.810:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.032355][ T39] audit: type=1326 audit(1729721806.810:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.046374][ T39] audit: type=1326 audit(1729721806.810:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.057035][ T39] audit: type=1326 audit(1729721806.810:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.064888][ T39] audit: type=1326 audit(1729721806.810:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12776 comm="syz.0.1765" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 647.525939][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1768'. [ 647.610547][T12789] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 647.613821][T12789] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 647.907143][T12806] netlink: 'syz.0.1773': attribute type 11 has an invalid length. [ 648.709727][T12832] bridge: RTM_NEWNEIGH with invalid ether address [ 648.926836][T12842] netlink: 'syz.3.1783': attribute type 11 has an invalid length. [ 649.113737][T12857] lo speed is unknown, defaulting to 1000 [ 650.930262][T12892] netlink: 'syz.0.1796': attribute type 11 has an invalid length. [ 650.991803][ T8564] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 651.046189][T12899] tmpfs: Bad value for 'mpol' [ 651.151953][ T8564] usb 6-1: Using ep0 maxpacket: 8 [ 651.160425][ T8564] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 651.164457][ T8564] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 651.167993][ T8564] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 651.189168][ T8564] usb 6-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 651.191979][ T8564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 651.194344][ T8564] usb 6-1: SerialNumber: syz [ 651.208739][T12890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 651.218557][ T8564] hub 6-1:1.0: bad descriptor, ignoring hub [ 651.220799][ T8564] hub 6-1:1.0: probe with driver hub failed with error -5 [ 651.423934][T12890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 651.555854][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 651.570776][T12917] bridge_slave_1: left allmulticast mode [ 651.572473][T12917] bridge_slave_1: left promiscuous mode [ 651.574236][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.581138][T12917] bridge1: port 1(bridge_slave_1) entered blocking state [ 651.587772][T12917] bridge1: port 1(bridge_slave_1) entered disabled state [ 651.590848][T12917] bridge_slave_1: entered allmulticast mode [ 651.593142][T12917] bridge_slave_1: entered promiscuous mode [ 651.846663][ T8564] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 652.061643][T12890] lo speed is unknown, defaulting to 1000 [ 652.246069][ T8564] usb 6-1: USB disconnect, device number 33 [ 652.248419][ T8564] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 652.422977][T12935] netlink: 'syz.2.1806': attribute type 11 has an invalid length. [ 652.464778][T12932] input: syz0 as /devices/virtual/input/input26 [ 653.114248][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 654.267753][T12990] 9pnet_fd: Insufficient options for proto=fd [ 654.641373][ T1448] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 654.771942][ T1448] usb 8-1: device descriptor read/64, error -71 [ 655.170504][T13010] netlink: 'syz.1.1825': attribute type 23 has an invalid length. [ 655.221771][ T1448] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 655.371804][ T1448] usb 8-1: device descriptor read/64, error -71 [ 655.481885][ T1448] usb usb8-port1: attempt power cycle [ 655.831835][ T1448] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 655.852467][ T1448] usb 8-1: device descriptor read/8, error -71 [ 656.101364][ T1448] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 656.128514][ T1448] usb 8-1: device descriptor read/8, error -71 [ 656.232688][ T1448] usb usb8-port1: unable to enumerate USB device [ 656.270323][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1830'. [ 656.483836][T13049] can0: slcan on ttyS3. [ 656.758607][T13053] 9pnet_fd: Insufficient options for proto=fd [ 657.382844][T13046] can0 (unregistered): slcan off ttyS3. [ 657.729368][T13080] serio: Serial port ptm0 [ 657.898613][T13099] veth1_macvtap: left promiscuous mode [ 657.913638][T13099] macsec0: entered promiscuous mode [ 657.915080][T13099] macsec0: entered allmulticast mode [ 659.034851][T13123] 9pnet_fd: Insufficient options for proto=fd [ 659.101875][ T1448] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 659.271878][ T1448] usb 6-1: Using ep0 maxpacket: 8 [ 659.280640][ T1448] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.288007][ T1448] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 659.292991][ T1448] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 659.297658][ T1448] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.303607][ T1448] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.307145][ T1448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.524172][ T1448] usb 6-1: GET_CAPABILITIES returned 0 [ 659.525710][ T1448] usbtmc 6-1:16.0: can't read capabilities [ 659.921523][ T35] usb 6-1: USB disconnect, device number 34 [ 660.680041][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1852'. [ 660.684736][T13150] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 660.691631][T13150] macvlan0: entered promiscuous mode [ 660.694458][T13150] macvlan0: entered allmulticast mode [ 660.702930][T13150] veth1_vlan: entered allmulticast mode [ 660.711218][T13150] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 660.802120][T13152] lo: entered allmulticast mode [ 660.809935][T13152] tunl0: entered allmulticast mode [ 660.817166][T13152] gre0: entered allmulticast mode [ 660.823946][T13157] gfs2: gfs2 mount does not exist [ 660.830598][T13152] gretap0: entered allmulticast mode [ 660.837941][T13152] erspan0: entered allmulticast mode [ 660.844088][T13152] ip_vti0: entered allmulticast mode [ 660.845568][T13155] xt_CT: No such helper "syz0" [ 660.850808][T13152] ip6_vti0: entered allmulticast mode [ 660.857929][T13152] sit0: entered allmulticast mode [ 660.867462][T13152] ip6tnl0: entered allmulticast mode [ 660.874066][T13152] ip6gre0: entered allmulticast mode [ 660.889797][T13152] syz_tun: entered allmulticast mode [ 660.897210][T13152] ip6gretap0: entered allmulticast mode [ 660.904918][T13152] bridge0: entered allmulticast mode [ 660.907612][T13152] vcan0: entered allmulticast mode [ 660.915774][T13152] bond0: entered allmulticast mode [ 660.917507][T13152] bond_slave_0: entered allmulticast mode [ 660.919642][T13152] bond_slave_1: entered allmulticast mode [ 660.931088][T13152] dummy0: entered allmulticast mode [ 660.942028][T13152] nlmon0: entered allmulticast mode [ 660.945362][T13152] caif0: entered allmulticast mode [ 660.948716][T13152] batadv0: entered allmulticast mode [ 660.957452][T13152] vxcan0: entered allmulticast mode [ 660.962392][T13152] vxcan1: entered allmulticast mode [ 660.970732][T13152] veth0: entered allmulticast mode [ 660.982078][T13152] veth1: entered allmulticast mode [ 660.994846][T13152] wg0: entered allmulticast mode [ 661.003159][T13152] wg1: entered allmulticast mode [ 661.010173][T13152] wg2: entered allmulticast mode [ 661.017777][T13152] veth0_to_bridge: entered allmulticast mode [ 661.035822][T13152] veth1_to_bridge: entered allmulticast mode [ 661.046903][T13152] veth0_to_bond: entered allmulticast mode [ 661.064717][T13152] veth1_to_bond: entered allmulticast mode [ 661.074807][T13152] veth0_to_team: entered allmulticast mode [ 661.086288][T13152] veth1_to_team: entered allmulticast mode [ 661.096346][T13152] veth0_to_batadv: entered allmulticast mode [ 661.100077][T13152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.105221][T13152] batadv_slave_0: entered allmulticast mode [ 661.110775][T13152] veth1_to_batadv: entered allmulticast mode [ 661.113631][T13152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.118032][T13152] batadv_slave_1: entered allmulticast mode [ 661.124318][T13152] xfrm0: entered allmulticast mode [ 661.131448][T13152] veth0_to_hsr: entered allmulticast mode [ 661.136831][T13152] hsr_slave_0: entered allmulticast mode [ 661.141548][T13152] veth1_to_hsr: entered allmulticast mode [ 661.146257][T13152] hsr_slave_1: entered allmulticast mode [ 661.150503][T13152] hsr0: entered allmulticast mode [ 661.158438][T13152] veth1_virt_wifi: entered allmulticast mode [ 661.163796][T13152] veth0_virt_wifi: entered allmulticast mode [ 661.167671][T13152] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 661.170611][T13152] veth1_vlan: entered allmulticast mode [ 661.175777][T13152] veth0_vlan: entered allmulticast mode [ 661.185104][T13152] vlan0: entered allmulticast mode [ 661.187122][T13152] vlan1: entered allmulticast mode [ 661.189114][T13152] macvlan0: entered allmulticast mode [ 661.195745][T13152] macvlan1: entered allmulticast mode [ 661.199450][T13152] ipvlan0: entered allmulticast mode [ 661.200912][T13152] ipvlan1: entered allmulticast mode [ 661.205870][T13152] veth1_macvtap: entered allmulticast mode [ 661.220196][T13152] veth0_macvtap: entered allmulticast mode [ 661.225641][T13152] macvtap0: entered allmulticast mode [ 661.233647][T13152] macsec0: entered allmulticast mode [ 661.246832][T13152] geneve0: entered allmulticast mode [ 661.251662][T13152] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.255184][T13152] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.257498][T13152] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.260402][T13152] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.268874][T13152] geneve1: entered allmulticast mode [ 661.277618][T13152] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 661.283343][T13152] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 661.288877][T13152] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 661.314778][T13152] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 661.318118][T13152] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 661.320266][T13152] vlan2: entered allmulticast mode [ 661.324980][T13152] bond1: entered allmulticast mode [ 661.329710][T13152] vxcan1.0: entered allmulticast mode [ 661.331210][T13152] bridge1: entered allmulticast mode [ 661.335992][T13152] sit1: entered allmulticast mode [ 661.354412][T13152] veth2: entered allmulticast mode [ 661.358082][T13152] veth3: entered allmulticast mode [ 661.362040][T13152] ip6gre1: entered allmulticast mode [ 661.365738][T13152] rose0: entered allmulticast mode [ 661.666461][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 661.670448][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 661.670458][ T39] audit: type=1326 audit(1729721821.490:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.1.1861" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 661.937680][T13192] 9pnet_fd: Insufficient options for proto=fd [ 663.508049][T13240] 9pnet_fd: Insufficient options for proto=fd [ 664.117037][T13243] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1876'. [ 664.360467][T13249] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 664.944120][T13256] netlink: 'syz.0.1875': attribute type 12 has an invalid length. [ 665.157837][T13267] netlink: 'syz.0.1880': attribute type 6 has an invalid length. [ 665.225141][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'. [ 665.227302][T13262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.229017][T13262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.232346][T13262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.234053][T13262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.542817][T13279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.742038][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'. [ 665.744436][T13306] netlink: 'syz.0.1885': attribute type 30 has an invalid length. [ 665.842823][T13307] 9pnet_fd: Insufficient options for proto=fd [ 665.986950][T13304] openvswitch: netlink: Flow key attribute not present in set flow. [ 666.066004][T13312] input: syz0 as /devices/virtual/input/input27 [ 667.244058][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 667.258896][T13328] netdevsim netdevsim1: Direct firmware load for .Þ failed with error -2 [ 667.262859][T13328] netdevsim netdevsim1: Falling back to sysfs fallback for: .Þ [ 667.333086][T13335] usb usb8: usbfs: process 13335 (syz.1.1892) did not claim interface 0 before use [ 668.332071][T13370] 9pnet_fd: Insufficient options for proto=fd [ 668.351877][ T1448] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 668.481911][ T1448] usb 6-1: device descriptor read/64, error -71 [ 668.721899][ T1448] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 668.861848][ T1448] usb 6-1: device descriptor read/64, error -71 [ 668.972609][ T1448] usb usb6-port1: attempt power cycle [ 669.321880][ T1448] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 669.342699][ T1448] usb 6-1: device descriptor read/8, error -71 [ 669.581787][ T1448] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 669.602380][ T1448] usb 6-1: device descriptor read/8, error -71 [ 669.724282][ T1448] usb usb6-port1: unable to enumerate USB device [ 669.881124][T13382] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1905'. [ 669.968335][T13388] lo speed is unknown, defaulting to 1000 [ 670.097668][T13389] binder: 13383:13389 ioctl c00c6211 0 returned -14 [ 671.026292][T13405] 9pnet_fd: Insufficient options for proto=fd [ 671.967966][T13427] tipc: MTU too low for tipc bearer [ 672.354333][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1923'. [ 672.362710][T13445] netlink: 'syz.1.1923': attribute type 10 has an invalid length. [ 672.374614][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.376742][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.389407][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.392113][T13445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.394425][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.396297][T13445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.405778][T13445] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 672.657483][T13452] 9pnet_fd: Insufficient options for proto=fd [ 672.877611][T13455] 9pnet_fd: Insufficient options for proto=fd [ 672.896739][T13455] syz.3.1926: attempt to access beyond end of device [ 672.896739][T13455] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 672.926202][T13455] FAT-fs (nbd3): unable to read boot sector [ 673.579285][T13468] overlayfs: overlapping lowerdir path [ 673.988021][ T5387] page_pool_release_retry() stalled pool shutdown: id 152, 1 inflight 60 sec [ 674.354742][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.359102][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.362673][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.365123][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.367629][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.370621][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.378551][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.381488][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.385668][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.388968][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.394394][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.396942][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.400715][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.403098][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.405214][T13492] overlay: filesystem on ./bus not supported as upperdir [ 674.648148][T13510] 9pnet_fd: Insufficient options for proto=fd [ 675.486863][T13530] syz.2.1944: attempt to access beyond end of device [ 675.486863][T13530] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 676.010897][ T8344] Bluetooth: Wrong link type (-71) [ 676.012744][ T8344] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 676.015179][ T8344] Bluetooth: Wrong link type (-22) [ 676.018100][ T8344] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 676.020697][ T8344] Bluetooth: hci0: link tx timeout [ 676.024826][ T8344] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 676.448367][T13560] netlink: 'syz.0.1954': attribute type 10 has an invalid length. [ 676.537425][T13566] 9pnet_fd: Insufficient options for proto=fd [ 676.971875][ T35] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 676.972438][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 677.121795][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 677.127585][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.131516][ T35] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 677.135590][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.152849][ T35] usb 6-1: config 0 descriptor?? [ 677.163420][ T35] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 677.535765][ T5406] usb 6-1: USB disconnect, device number 39 [ 678.041806][ T8344] Bluetooth: hci0: command 0x0405 tx timeout [ 678.249379][T13588] can0: slcan on ttyS3. [ 679.196893][T13618] 9pnet_fd: Insufficient options for proto=fd [ 679.213175][T13586] can0 (unregistered): slcan off ttyS3. [ 679.517873][T13633] overlayfs: missing 'lowerdir' [ 679.569106][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 679.773382][T13637] kvm: kvm [13636]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 679.821842][ T1448] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 679.908798][T13642] netlink: 'syz.2.1970': attribute type 5 has an invalid length. [ 679.985011][ T1448] usb 8-1: Using ep0 maxpacket: 8 [ 679.993450][ T1448] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 679.996580][ T1448] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 680.008476][ T1448] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 680.011655][ T1448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.014921][ T1448] usb 8-1: Product: syz [ 680.016411][ T1448] usb 8-1: Manufacturer: syz [ 680.018097][ T1448] usb 8-1: SerialNumber: syz [ 680.023736][ T1448] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 680.027929][ T1448] dvb-usb: bulk message failed: -22 (3/0) [ 680.051976][ T8349] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 680.055420][ T8349] Bluetooth: hci0: Injecting HCI hardware error event [ 680.055678][ T1448] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 680.058501][ T8349] Bluetooth: hci0: hardware error 0x00 [ 680.063976][ T1448] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 680.070559][ T1448] usb 8-1: media controller created [ 680.101203][ T1448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.124318][ T1448] dvb-usb: bulk message failed: -22 (6/0) [ 680.127016][ T1448] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 680.132615][ T1448] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input28 [ 680.138558][ T1448] dvb-usb: schedule remote query interval to 150 msecs. [ 680.141029][ T1448] dvb-usb: bulk message failed: -22 (3/0) [ 680.162267][ T1448] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 680.276829][ T9] usb 8-1: USB disconnect, device number 31 [ 681.074052][ T9] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 681.164297][T13680] tipc: Started in network mode [ 681.165947][T13680] tipc: Node identity ffffffff, cluster identity 4711 [ 681.167993][T13680] tipc: Node number set to 4294967295 [ 681.384118][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 681.458368][T13688] 9pnet_fd: Insufficient options for proto=fd [ 681.552187][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 681.555526][ T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 681.558519][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 681.573736][ T9] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 681.596024][ T9] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 681.603272][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 681.608743][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 681.612204][ T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 681.615461][ T9] usb 8-1: Product: syz [ 681.617382][ T9] usb 8-1: Manufacturer: syz [ 681.619582][ T9] usb 8-1: SerialNumber: syz [ 681.627272][ T9] usb 8-1: config 0 descriptor?? [ 681.639682][ T9] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 681.648238][ T9] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 681.892910][ T9] usb 8-1: USB disconnect, device number 32 [ 681.892962][ C0] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 681.898121][T13674] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 681.905142][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 682.063285][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1978'. [ 682.132082][ T8349] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 682.338238][ T39] audit: type=1800 audit(1729721842.160:1257): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1980" name="bus" dev="overlay" ino=1218 res=0 errno=0 [ 682.823906][T13716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1982'. [ 682.920964][T13718] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1983'. [ 682.924640][T13718] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1983'. [ 683.181960][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.112744][T13728] netlink: 'syz.0.1986': attribute type 10 has an invalid length. [ 684.131967][T13728] netlink: 'syz.0.1986': attribute type 10 has an invalid length. [ 684.141834][T13728] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1986'. [ 684.149733][T13728] team0: entered promiscuous mode [ 684.151221][T13728] team_slave_0: entered promiscuous mode [ 684.153161][T13728] team_slave_1: entered promiscuous mode [ 684.155493][T13728] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.157365][T13728] bridge0: port 3(team0) entered blocking state [ 684.162629][T13728] bridge0: port 3(team0) entered disabled state [ 684.164781][T13728] team0: entered allmulticast mode [ 684.166146][T13728] team_slave_0: entered allmulticast mode [ 684.167813][T13728] team_slave_1: entered allmulticast mode [ 684.170790][T13728] bridge0: port 3(team0) entered blocking state [ 684.172556][T13728] bridge0: port 3(team0) entered forwarding state [ 684.206884][T13736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1991'. [ 684.293256][T13742] fuse: Unknown parameter 'ro\tmode' [ 684.406615][T13752] 9pnet_fd: Insufficient options for proto=fd [ 684.604361][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.606653][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.827927][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'. [ 685.266230][T13764] overlay: filesystem on ./bus not supported as upperdir [ 685.348787][T13770] lo speed is unknown, defaulting to 1000 [ 685.495901][T13773] tipc: Started in network mode [ 685.497291][T13773] tipc: Node identity ac1414aa, cluster identity 4711 [ 685.499841][T13773] tipc: New replicast peer: 100.1.1.1 [ 685.505252][T13773] tipc: Enabled bearer , priority 10 [ 686.288614][T13782] raw_sendmsg: syz.2.2002 forgot to set AF_INET. Fix it! [ 686.512067][ T8564] tipc: Node number set to 2886997162 [ 686.523608][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'. [ 686.978153][T13795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2005'. [ 687.380992][T13798] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 687.421827][T13798] lo speed is unknown, defaulting to 1000 [ 688.050791][T13808] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2007'. [ 688.419858][T13814] 9pnet_fd: Insufficient options for proto=fd [ 689.135848][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2012'. [ 689.233932][T13823] proc: Unknown parameter 'fd' [ 689.597596][T13832] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2015'. [ 689.774966][T13834] fuse: Unknown parameter 'ûd¡' [ 690.180906][ T39] audit: type=1326 audit(1729721850.000:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13835 comm="syz.2.2017" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 690.574585][T13842] 9pnet_fd: Insufficient options for proto=fd [ 691.145926][T13863] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2022'. [ 691.672391][T13878] block device autoloading is deprecated and will be removed. [ 692.596586][T13893] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2031'. [ 692.991448][T13904] 9pnet_fd: Insufficient options for proto=fd [ 693.504174][T13908] input: syz0 as /devices/virtual/input/input29 [ 693.856465][T13914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2036'. [ 693.978762][T13917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2037'. [ 694.217719][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 694.228431][T13923] random: crng reseeded on system resumption [ 695.327426][T13940] 9pnet_fd: Insufficient options for proto=fd [ 695.701496][T13943] bpf: Bad value for 'uid' [ 695.716415][T13943] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2044'. [ 696.063840][T13957] ubi: mtd0 is already attached to ubi0 [ 696.158200][T13964] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2049'. [ 698.243234][T14008] 9pnet_fd: Insufficient options for proto=fd [ 698.653562][T14011] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 698.848983][T14020] sp0: Synchronizing with TNC [ 698.934032][T14025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2063'. [ 698.954938][T14029] dummy0: entered promiscuous mode [ 698.973469][T14029] dummy0: left promiscuous mode [ 699.020869][T14020] mkiss: ax0: crc mode is auto. [ 699.079179][T14040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2064'. [ 700.402915][T14060] 9pnet_fd: Insufficient options for proto=fd [ 701.294718][T14081] lo speed is unknown, defaulting to 1000 [ 702.091112][ T39] audit: type=1326 audit(1729721861.910:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.119231][ T39] audit: type=1326 audit(1729721861.910:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.138860][ T39] audit: type=1326 audit(1729721861.920:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.159306][ T39] audit: type=1326 audit(1729721861.920:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.180740][ T39] audit: type=1326 audit(1729721861.920:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.207006][ T39] audit: type=1326 audit(1729721861.920:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.232161][ T39] audit: type=1326 audit(1729721861.940:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.243179][ T39] audit: type=1326 audit(1729721861.940:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.3.2078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 702.646458][T14093] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2079'. [ 702.714605][T14100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 702.996526][T14110] 9pnet_fd: Insufficient options for proto=fd [ 703.503536][T14115] fuse: Bad value for 'fd' [ 704.985530][T14151] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2096'. [ 705.452450][T14160] 9pnet_fd: Insufficient options for proto=fd [ 706.010546][T14169] netlink: 'syz.0.2100': attribute type 10 has an invalid length. [ 706.038294][T14169] team0: Device veth0_macvtap failed to register rx_handler [ 706.220389][T14180] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2102'. [ 707.329359][T14201] 9pnet_fd: Insufficient options for proto=fd [ 708.041764][T14206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2109'. [ 708.045746][T14206] netlink: 'syz.1.2109': attribute type 10 has an invalid length. [ 708.053230][T14206] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 708.442752][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2111'. [ 709.917233][T14242] 9pnet_fd: Insufficient options for proto=fd [ 710.547984][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2119'. [ 710.569427][T14245] bridge_slave_1: left allmulticast mode [ 710.571178][T14245] bridge_slave_1: left promiscuous mode [ 710.573529][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.626578][T14245] bridge1: port 1(bridge_slave_1) entered blocking state [ 710.635895][T14245] bridge1: port 1(bridge_slave_1) entered disabled state [ 710.643533][T14245] bridge_slave_1: entered allmulticast mode [ 710.647854][T14245] bridge_slave_1: entered promiscuous mode [ 710.673313][T14245] bridge1: port 1(bridge_slave_1) entered blocking state [ 710.675162][T14245] bridge1: port 1(bridge_slave_1) entered forwarding state [ 710.732171][T14250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 711.380201][T14277] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2127'. [ 711.457526][T14277] fuse: Bad value for 'fd' [ 711.525721][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 711.900243][T14284] 9pnet_fd: Insufficient options for proto=fd [ 712.409593][T14289] 9pnet_fd: Insufficient options for proto=fd [ 712.836449][T14302] 9pnet_fd: Insufficient options for proto=fd [ 713.306815][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'. [ 713.521295][T14320] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2138'. [ 713.777883][T14331] batadv_slave_1: entered allmulticast mode [ 713.781342][T14331] batadv_slave_1: left allmulticast mode [ 713.864917][T14337] 9pnet_fd: Insufficient options for proto=fd [ 714.880551][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 715.039939][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2144'. [ 715.790715][T14368] 9pnet_fd: Insufficient options for proto=fd [ 717.478981][T14397] 9pnet_fd: Insufficient options for proto=fd [ 718.032672][ T5407] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 718.035506][ T5407] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz0] on syz0 [ 718.255873][T14412] overlay: Unknown parameter '/' [ 720.006125][T14422] 9pnet_fd: Insufficient options for proto=fd [ 722.085862][T14458] netlink: 'syz.3.2169': attribute type 13 has an invalid length. [ 722.358704][T14465] 9pnet_fd: Insufficient options for proto=fd [ 723.580629][ T39] audit: type=1326 audit(1729721883.400:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.586512][ T39] audit: type=1326 audit(1729721883.400:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.593191][ T39] audit: type=1326 audit(1729721883.410:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.599094][ T39] audit: type=1326 audit(1729721883.420:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.605260][ T39] audit: type=1326 audit(1729721883.420:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.611272][ T39] audit: type=1326 audit(1729721883.420:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.617475][ T39] audit: type=1326 audit(1729721883.420:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.623785][ T39] audit: type=1326 audit(1729721883.420:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.634896][ T39] audit: type=1326 audit(1729721883.460:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 723.643277][ T39] audit: type=1326 audit(1729721883.460:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14484 comm="syz.3.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 724.636502][T14510] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2181'. [ 724.722070][T14511] 9pnet_fd: Insufficient options for proto=fd [ 725.556922][T14526] netlink: 'syz.0.2187': attribute type 11 has an invalid length. [ 725.561311][T14526] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2187'. [ 725.602944][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 725.665590][T14530] 9pnet_fd: Insufficient options for proto=fd [ 727.299123][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2192'. [ 727.326660][T14553] lo speed is unknown, defaulting to 1000 [ 727.557430][T14563] 9pnet_fd: Insufficient options for proto=fd [ 727.800267][T14566] vivid-007: disconnect [ 727.935571][T14567] overlayfs: failed to resolve 'uuid=auto': -2 [ 728.153468][T14574] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2196'. [ 728.747759][T14565] vivid-007: reconnect [ 729.312740][T14594] 9pnet_fd: Insufficient options for proto=fd [ 729.918352][ T5407] libceph: connect (1)[c::]:6789 error -101 [ 729.921230][ T5407] libceph: mon0 (1)[c::]:6789 connect error [ 730.034685][T14605] ceph: No mds server is up or the cluster is laggy [ 730.226671][T14616] 9pnet_fd: Insufficient options for proto=fd [ 730.909369][T14619] vivid-007: disconnect [ 731.027662][T14625] ptrace attach of "/syz-executor exec"[10388] was attempted by " [ 731.036798][T14625] netlink: 'syz.2.2207': attribute type 3 has an invalid length. [ 731.062735][T14625] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2207'. [ 731.533733][T14626] overlayfs: failed to resolve 'uuid=auto': -2 [ 731.804637][T14618] vivid-007: reconnect [ 732.637873][T14649] 9pnet_fd: Insufficient options for proto=fd [ 733.241997][T14654] 9pnet_fd: Insufficient options for proto=fd [ 734.366314][T14668] tmpfs: Unknown parameter 'usrÐ;Í ' [ 734.421908][ T5407] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 734.581780][ T5407] usb 8-1: Using ep0 maxpacket: 8 [ 734.587979][ T5407] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 734.589984][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.594075][ T5407] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.597136][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.600229][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.611217][ T5407] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 734.613856][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.616934][ T5407] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.620078][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.625298][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.629158][ T5407] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 734.631293][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.634478][ T5407] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.637906][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.640728][ T5407] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.649451][ T5407] usb 8-1: string descriptor 0 read error: -22 [ 734.651118][ T5407] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 734.654348][ T5407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.666128][ T5407] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 734.987049][ T5407] usb 8-1: USB disconnect, device number 33 [ 735.002248][T14673] adutux: No device or device unplugged -19 [ 735.530455][ T8344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 735.539597][ T8344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 735.545054][ T8344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 735.549026][ T8344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 735.553227][ T8344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 735.557129][ T8344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 735.595125][T14685] lo speed is unknown, defaulting to 1000 [ 735.628099][T14688] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2225'. [ 735.694116][T14685] chnl_net:caif_netlink_parms(): no params data found [ 735.754901][T14685] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.756823][T14685] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.759096][T14685] bridge_slave_0: entered allmulticast mode [ 735.761663][T14685] bridge_slave_0: entered promiscuous mode [ 735.767692][T14685] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.770371][T14685] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.773584][T14685] bridge_slave_1: entered allmulticast mode [ 735.775830][T14685] bridge_slave_1: entered promiscuous mode [ 735.798867][T14685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.803517][T14685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.838655][T14685] team0: Port device team_slave_0 added [ 735.843766][T14685] team0: Port device team_slave_1 added [ 735.897991][T14685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.904547][T14685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.911444][T14685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.931604][T14685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.938185][T14685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.951403][T14685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.131097][T14685] hsr_slave_0: entered promiscuous mode [ 736.135382][T14685] hsr_slave_1: entered promiscuous mode [ 736.137778][T14685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.139954][T14685] Cannot create hsr debugfs directory [ 736.394540][T14685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.397370][T14685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.537907][T14685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.543382][T14685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.676922][T14685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.680676][T14685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.795229][T14710] 9pnet_fd: Insufficient options for proto=fd [ 737.169953][T14685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.173272][T14685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 737.375686][T14685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 737.398485][T14685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 737.410309][T14685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 737.416434][T14685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 737.555216][T14685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.576712][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 737.606859][T14716] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2230' sets config #261 [ 737.643712][T14720] Cannot find del_set index 4 as target [ 737.654837][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 737.663725][ T8349] Bluetooth: hci6: command tx timeout [ 738.085932][T14714] lo speed is unknown, defaulting to 1000 [ 738.093501][T14685] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.108016][T13366] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.110493][T13366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.135440][T10913] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.137849][T10913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.243996][T14685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.528333][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 738.806297][T14685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.860834][T14685] veth0_vlan: entered promiscuous mode [ 738.868200][T14685] veth1_vlan: entered promiscuous mode [ 738.899617][T14685] veth0_macvtap: entered promiscuous mode [ 738.906356][T14685] veth1_macvtap: entered promiscuous mode [ 738.923155][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.926502][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.929982][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.933940][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.937545][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.941242][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.949983][T14685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.977653][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.981402][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.993283][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.996041][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.998575][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.001209][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.009384][T14685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.017923][T14685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.020368][T14685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.022859][T14685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.025209][T14685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.078277][T13286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.085514][T13286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.104369][T13286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.108301][T13286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.722599][ T8349] Bluetooth: hci6: command tx timeout [ 739.821262][T14746] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 740.715405][T14759] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2237'. [ 741.597788][T14778] Cannot find del_set index 4 as target [ 741.789457][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 741.802292][ T8349] Bluetooth: hci6: command tx timeout [ 741.809809][T14791] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2245' sets config #261 [ 741.814357][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 742.011832][T14797] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2246'. [ 743.882613][ T8349] Bluetooth: hci6: command tx timeout [ 744.945483][T10913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.947564][T10913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.054199][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.055862][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.884860][ T8344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 748.891170][ T8344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 748.911805][ T8344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 748.922776][ T8344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 748.925164][ T8344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 748.942253][ T8344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 748.981527][T14860] lo speed is unknown, defaulting to 1000 [ 749.223222][T14860] chnl_net:caif_netlink_parms(): no params data found [ 749.346192][T14860] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.348213][T14860] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.350136][T14860] bridge_slave_0: entered allmulticast mode [ 749.355827][T14860] bridge_slave_0: entered promiscuous mode [ 749.359259][T14860] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.361495][T14860] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.364195][T14860] bridge_slave_1: entered allmulticast mode [ 749.369753][T14860] bridge_slave_1: entered promiscuous mode [ 749.441323][T14860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.448324][T14860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.549295][T14860] team0: Port device team_slave_0 added [ 749.559859][T14860] team0: Port device team_slave_1 added [ 749.584933][T14876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2263'. [ 749.615895][T14860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.618123][T14860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.626853][T14860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.634662][T14860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.636556][T14860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.644378][T14860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.688425][T14860] hsr_slave_0: entered promiscuous mode [ 749.690487][T14860] hsr_slave_1: entered promiscuous mode [ 749.693696][T14860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.695678][T14860] Cannot create hsr debugfs directory [ 749.997441][T14860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.090118][T14860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.197121][T14860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.291416][T14860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.571266][T14860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 750.594398][T14860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.604227][T14860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.615120][T14860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.716483][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.728953][T14860] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.733172][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.735074][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.744820][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.747003][T13299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.905947][T14860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.940934][T14860] veth0_vlan: entered promiscuous mode [ 750.947563][T14860] veth1_vlan: entered promiscuous mode [ 750.962004][T14860] veth0_macvtap: entered promiscuous mode [ 750.966093][T14860] veth1_macvtap: entered promiscuous mode [ 750.974804][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.977732][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.980308][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.983816][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.986396][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.989203][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.992156][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.994857][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.998422][T14860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.001810][ T8349] Bluetooth: hci7: command tx timeout [ 751.009321][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.012921][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.015471][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.018213][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.020762][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.023731][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.026308][T14860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.029080][T14860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.036480][T14860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.041544][T14860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.044188][T14860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.046556][T14860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.048936][T14860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.185292][T10913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.187602][T10913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.214492][T13290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.230057][T13290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.694033][T14912] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 752.696624][T14912] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.2280'. [ 752.699105][T14912] openvswitch: netlink: Flow key attr not present in new flow. [ 755.321883][ T8349] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 755.326697][ T8349] Bluetooth: hci7: Injecting HCI hardware error event [ 755.331851][ T8344] Bluetooth: hci7: hardware error 0x00 [ 757.402678][ T8344] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 759.840556][ T8349] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 759.845547][ T8349] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 759.849987][ T8349] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 759.855286][ T8349] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 759.858583][ T8349] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 759.863841][ T8349] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 759.899959][T14918] lo speed is unknown, defaulting to 1000 [ 760.088887][T14918] chnl_net:caif_netlink_parms(): no params data found [ 760.167391][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.170519][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.174848][T14918] bridge_slave_0: entered allmulticast mode [ 760.177358][T14918] bridge_slave_0: entered promiscuous mode [ 760.184951][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.187720][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.189859][T14918] bridge_slave_1: entered allmulticast mode [ 760.193252][T14918] bridge_slave_1: entered promiscuous mode [ 760.223584][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.228270][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.260360][T14918] team0: Port device team_slave_0 added [ 760.264324][T14918] team0: Port device team_slave_1 added [ 760.290748][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.293134][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.300170][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.322763][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.325207][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.341027][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.374509][T14918] hsr_slave_0: entered promiscuous mode [ 760.377107][T14918] hsr_slave_1: entered promiscuous mode [ 760.379671][T14918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.382340][T14918] Cannot create hsr debugfs directory [ 760.773284][T14918] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 760.887378][T14918] team0: Port device netdevsim0 removed [ 761.055443][ T8344] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 761.065969][ T8344] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 761.072095][ T8344] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 761.080864][ T8344] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 761.092318][ T8344] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 761.096566][ T8344] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 761.123831][T14918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 761.129533][T14918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 761.145928][T14918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 761.182799][T14918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 761.190802][T14928] lo speed is unknown, defaulting to 1000 [ 761.232549][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.246138][T14918] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.261465][T13290] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.263378][T13290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.281087][T13290] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.283022][T13290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.604100][T14928] chnl_net:caif_netlink_parms(): no params data found [ 761.748671][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.751423][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.757631][T14928] bridge_slave_0: entered allmulticast mode [ 761.760331][T14928] bridge_slave_0: entered promiscuous mode [ 761.852080][T14928] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.864230][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.868480][T14928] bridge_slave_1: entered allmulticast mode [ 761.882178][ T8349] Bluetooth: hci8: command tx timeout [ 761.882185][T14928] bridge_slave_1: entered promiscuous mode [ 762.160142][T14918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.244960][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.270019][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.379286][T14928] team0: Port device team_slave_0 added [ 762.389004][T14928] team0: Port device team_slave_1 added [ 762.465777][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.467927][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.476750][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.486476][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.489288][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.502165][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.529120][T14918] veth0_vlan: entered promiscuous mode [ 762.659391][T14928] hsr_slave_0: entered promiscuous mode [ 762.675403][T14928] hsr_slave_1: entered promiscuous mode [ 762.685673][T14928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.688337][T14928] Cannot create hsr debugfs directory [ 762.747405][T14918] veth1_vlan: entered promiscuous mode [ 762.839334][T14918] veth0_macvtap: entered promiscuous mode [ 762.851900][ T8413] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 762.899041][T14918] veth1_macvtap: entered promiscuous mode [ 762.959923][T14928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.988196][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.992661][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.995330][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.998593][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.001564][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.001840][ T8413] usb 5-1: Using ep0 maxpacket: 8 [ 763.005395][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.009758][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.013565][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.016102][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.019244][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.022291][ T8413] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.024904][ T8413] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 763.025637][T14918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.027168][ T8413] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 763.033994][ T8413] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 763.037499][ T8413] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 763.040183][ T8413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.053177][ T8413] hub 5-1:1.0: bad descriptor, ignoring hub [ 763.055187][ T8413] hub 5-1:1.0: probe with driver hub failed with error -5 [ 763.057216][ T8413] cdc_wdm 5-1:1.0: skipping garbage [ 763.058583][ T8413] cdc_wdm 5-1:1.0: skipping garbage [ 763.066103][T14928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.083239][ T8413] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 763.085060][ T8413] cdc_wdm 5-1:1.0: Unknown control protocol [ 763.089566][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.095244][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.097877][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.101529][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.108775][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.111564][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.114271][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.117020][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.119710][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.123576][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.128723][T14918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.140121][T14918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.143060][T14918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.145935][T14918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.148577][T14918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.162832][ T8349] Bluetooth: hci9: command tx timeout [ 763.197255][T14928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.297906][T14928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.318644][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.322216][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.367332][T10913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.370936][T10913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.477218][T14928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 763.491232][T14928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 763.503921][T14928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 763.512536][T14928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 763.551457][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 763.594866][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.617111][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.632238][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.634218][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.642566][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.644504][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.705563][T14928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 763.708293][T14928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.871912][T14951] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 763.964809][ T8344] Bluetooth: hci8: command tx timeout [ 763.983194][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.069684][T14928] veth0_vlan: entered promiscuous mode [ 764.091045][T14928] veth1_vlan: entered promiscuous mode [ 764.145453][T14928] veth0_macvtap: entered promiscuous mode [ 764.156964][T14928] veth1_macvtap: entered promiscuous mode [ 764.172430][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.176009][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.179540][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.184720][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.188174][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.193258][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.196857][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.200521][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.204505][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.209713][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.213422][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.217067][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.227526][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.239352][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.244600][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.247949][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.251416][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.258746][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.268236][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.271629][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.281104][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.290195][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.294054][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.308615][T14928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.313374][T14928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.319627][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.336738][T14928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.339707][T14928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.343350][T14928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.346356][T14928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.470474][T13366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.482907][T13366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.507174][T13366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.510705][T13366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.844070][T14969] fuse: Unknown parameter 'grk€”Éd' [ 764.871878][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.874648][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.892948][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.896576][T14969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.900463][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.903230][T14969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.242543][ T8344] Bluetooth: hci9: command tx timeout [ 765.485054][T14969] team0: Port device bridge0 added [ 765.562032][ T5357] Bluetooth: hci6: command 0x0406 tx timeout [ 765.595566][T10075] usb 5-1: USB disconnect, device number 26 [ 766.042140][ T8349] Bluetooth: hci8: command tx timeout [ 767.322285][ T8349] Bluetooth: hci9: command tx timeout [ 767.423713][T15004] lo speed is unknown, defaulting to 1000 [ 767.572441][ T8349] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 767.576607][ T8349] Bluetooth: hci6: Injecting HCI hardware error event [ 767.581233][ T5357] Bluetooth: hci6: hardware error 0x00 [ 768.133341][ T8349] Bluetooth: hci8: command tx timeout [ 768.710559][T15020] vivid-007: disconnect [ 768.960075][T15022] overlay: Unknown parameter '/' [ 768.984735][T15022] overlayfs: missing 'lowerdir' [ 769.411847][ T8349] Bluetooth: hci9: command tx timeout [ 769.588531][T15019] vivid-007: reconnect [ 769.642284][ T5357] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 770.999943][T15031] netlink: 'syz.1.2305': attribute type 10 has an invalid length. [ 771.106258][T15031] batman_adv: batadv0: Adding interface: team0 [ 771.125661][T15031] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.138450][T15031] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 771.142559][T15034] netlink: 'syz.1.2305': attribute type 10 has an invalid length. [ 771.150533][T15034] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2305'. [ 771.153974][T15034] team0: entered promiscuous mode [ 771.155762][T15034] team_slave_0: entered promiscuous mode [ 771.157755][T15034] team_slave_1: entered promiscuous mode [ 771.159782][T15034] bridge0: entered promiscuous mode [ 771.164214][T15034] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.166693][T15034] batman_adv: batadv0: Interface activated: team0 [ 771.177397][T15034] batman_adv: batadv0: Interface deactivated: team0 [ 771.179720][T15034] batman_adv: batadv0: Removing interface: team0 [ 771.197857][T15034] bridge0: port 3(team0) entered blocking state [ 771.200080][T15034] bridge0: port 3(team0) entered disabled state [ 771.204103][T15034] team0: entered allmulticast mode [ 771.205501][T15034] team_slave_0: entered allmulticast mode [ 771.215400][T15034] team_slave_1: entered allmulticast mode [ 771.217703][T15034] bridge0: entered allmulticast mode [ 771.220953][T15034] team0: left allmulticast mode [ 771.242014][T15034] team_slave_0: left allmulticast mode [ 771.248866][T15034] team_slave_1: left allmulticast mode [ 771.250455][T15034] bridge0: left allmulticast mode [ 773.205614][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.399085][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.486070][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.584297][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.803865][ T1106] bridge_slave_1: left allmulticast mode [ 773.811066][ T1106] bridge_slave_1: left promiscuous mode [ 773.823608][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.833174][ T1106] bridge_slave_0: left allmulticast mode [ 773.834764][ T1106] bridge_slave_0: left promiscuous mode [ 773.836296][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.919169][ T8349] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 773.923417][ T8349] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 773.925989][ T8349] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 773.929287][ T8349] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 773.931413][ T8349] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 773.935663][ T8349] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 774.565359][ T8349] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 774.573277][ T8349] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 774.577891][ T8349] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 774.584732][ T8349] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 774.599771][ T8349] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 774.605774][ T8349] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 775.000741][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.014891][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.021525][ T1106] bond0 (unregistering): Released all slaves [ 775.205983][T15068] tmpfs: Unknown parameter '1844674407370955161500000000000000000000007017777777777777777777770xffffffffffffffffÿÿ' [ 775.386920][T15054] lo speed is unknown, defaulting to 1000 [ 775.547448][T15051] lo speed is unknown, defaulting to 1000 [ 775.931829][ T8494] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 775.961839][ T8349] Bluetooth: hci9: command tx timeout [ 776.011022][T15054] chnl_net:caif_netlink_parms(): no params data found [ 776.097378][T15084] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2308'. [ 776.104716][ T8494] usb 6-1: Using ep0 maxpacket: 32 [ 776.122447][ T8494] usb 6-1: too many endpoints for config 0 interface 0 altsetting 82: 47, using maximum allowed: 30 [ 776.137055][ T8494] usb 6-1: config 0 interface 0 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 776.144132][ T8494] usb 6-1: config 0 interface 0 has no altsetting 0 [ 776.169638][ T8494] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 776.178016][ T8494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.188895][ T8494] usb 6-1: Product: syz [ 776.190234][ T8494] usb 6-1: Manufacturer: syz [ 776.202402][ T8494] usb 6-1: SerialNumber: syz [ 776.216614][ T8494] usb 6-1: config 0 descriptor?? [ 776.231005][ T1106] hsr_slave_0: left promiscuous mode [ 776.242689][ T1106] hsr_slave_1: left promiscuous mode [ 776.258797][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.260775][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.271211][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.289224][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.409355][ T1106] veth1_macvtap: left promiscuous mode [ 776.410899][ T1106] veth0_macvtap: left promiscuous mode [ 776.417004][ T1106] veth1_vlan: left promiscuous mode [ 776.418492][ T1106] veth0_vlan: left promiscuous mode [ 776.703123][ T8494] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 776.723972][ T8494] usb 6-1: USB disconnect, device number 40 [ 776.787655][ T8349] Bluetooth: hci10: command tx timeout [ 777.271784][T10075] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 777.430307][T10075] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.437124][T10075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 777.440666][T10075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 777.443733][T10075] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 777.447203][T10075] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.449486][T10075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.453730][T10075] usb 5-1: config 0 descriptor?? [ 777.704176][T10075] usbhid 5-1:0.0: can't add hid device: -71 [ 777.705888][T10075] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 777.715926][T10075] usb 5-1: USB disconnect, device number 27 [ 778.055703][ T8349] Bluetooth: hci9: command tx timeout [ 778.701362][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 778.862399][ T8349] Bluetooth: hci10: command tx timeout [ 779.028319][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 779.398909][T15118] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2316'. [ 780.002173][ T8495] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 780.131931][ T8349] Bluetooth: hci9: command tx timeout [ 780.196869][ T8495] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.199824][ T8495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.202728][ T8495] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 780.205348][ T8495] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.209621][ T8495] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.213050][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 780.231029][ T8495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.237534][ T8495] usb 5-1: config 0 descriptor?? [ 780.620783][ T8495] usbhid 5-1:0.0: can't add hid device: -71 [ 780.623091][ T8495] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 780.632636][ T8495] usb 5-1: USB disconnect, device number 28 [ 780.877069][T15054] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.881166][T15054] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.887122][T15054] bridge_slave_0: entered allmulticast mode [ 780.889482][T15054] bridge_slave_0: entered promiscuous mode [ 780.900719][T15054] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.902779][T15054] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.904755][T15054] bridge_slave_1: entered allmulticast mode [ 780.908317][T15054] bridge_slave_1: entered promiscuous mode [ 780.932374][ T8349] Bluetooth: hci10: command tx timeout [ 780.948733][T15051] chnl_net:caif_netlink_parms(): no params data found [ 780.969898][T15054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.027128][T15054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.156675][T15054] team0: Port device team_slave_0 added [ 781.193897][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 781.199146][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 781.207144][T15054] team0: Port device team_slave_1 added [ 781.270862][T15051] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.276389][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.278965][T15051] bridge_slave_0: entered allmulticast mode [ 781.283122][T15051] bridge_slave_0: entered promiscuous mode [ 781.285978][T15054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.290557][T15054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.298298][T15054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.304491][T15051] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.306406][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.308372][T15051] bridge_slave_1: entered allmulticast mode [ 781.310588][T15051] bridge_slave_1: entered promiscuous mode [ 781.353972][T15054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.355859][T15054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.362918][T15054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.389266][T15051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.432825][T15051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.551286][T15054] hsr_slave_0: entered promiscuous mode [ 781.558191][T15054] hsr_slave_1: entered promiscuous mode [ 781.561777][T15054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.564982][T15054] Cannot create hsr debugfs directory [ 781.589556][T15051] team0: Port device team_slave_0 added [ 781.712009][T15051] team0: Port device team_slave_1 added [ 781.797724][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.836036][T15051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.838166][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.851192][T15051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.293235][ T8349] Bluetooth: hci9: command tx timeout [ 782.540691][T15051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.542553][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.548862][T15051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.838037][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.865732][ T5357] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 782.873306][ T5357] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 782.877833][ T5357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 782.886586][ T5357] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 782.889702][ T5357] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 782.892369][ T5357] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 783.003933][ T5357] Bluetooth: hci10: command tx timeout [ 784.432959][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.444629][T15051] hsr_slave_0: entered promiscuous mode [ 784.447053][T15051] hsr_slave_1: entered promiscuous mode [ 784.450299][T15051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.453760][T15051] Cannot create hsr debugfs directory [ 784.662758][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.707552][T15159] lo speed is unknown, defaulting to 1000 [ 785.001929][ T5357] Bluetooth: hci6: command tx timeout [ 785.338252][ T1099] bridge_slave_1: left allmulticast mode [ 785.340067][ T1099] bridge_slave_1: left promiscuous mode [ 785.347820][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.371341][ T1099] bridge_slave_0: left allmulticast mode [ 785.378981][ T1099] bridge_slave_0: left promiscuous mode [ 785.380965][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.761257][ T1099] bridge0 (unregistering): left promiscuous mode [ 785.772528][ T1099] team0: Port device bridge0 removed [ 786.032561][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.046282][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.056994][ T1099] bond0 (unregistering): Released all slaves [ 786.106963][T15054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 786.187998][T15051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.297004][T15054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 786.416363][T15054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 786.469584][T15051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.501836][T15054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 786.541574][T15159] chnl_net:caif_netlink_parms(): no params data found [ 786.680895][T15051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.927677][T15051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.960607][ T1099] hsr_slave_0: left promiscuous mode [ 786.963564][ T1099] hsr_slave_1: left promiscuous mode [ 786.967088][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.969358][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.975253][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.977571][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.032241][ T1099] veth1_macvtap: left promiscuous mode [ 787.033785][ T1099] veth0_macvtap: left promiscuous mode [ 787.035265][ T1099] veth1_vlan: left promiscuous mode [ 787.036684][ T1099] veth0_vlan: left promiscuous mode [ 787.081799][ T5357] Bluetooth: hci6: command tx timeout [ 789.058053][ T1099] team_slave_1 (unregistering): left promiscuous mode [ 789.072686][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 789.161821][ T5357] Bluetooth: hci6: command tx timeout [ 789.530292][ T1099] team_slave_0 (unregistering): left promiscuous mode [ 789.540377][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 791.203635][T15159] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.222165][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.224439][T15159] bridge_slave_0: entered allmulticast mode [ 791.242296][T15159] bridge_slave_0: entered promiscuous mode [ 791.252015][ T5357] Bluetooth: hci6: command tx timeout [ 791.254480][T15054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.272228][T15159] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.274711][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.277801][T15159] bridge_slave_1: entered allmulticast mode [ 791.285143][T15159] bridge_slave_1: entered promiscuous mode [ 791.430494][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.460527][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.499072][T15054] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.595657][T15159] team0: Port device team_slave_0 added [ 791.614403][T15159] team0: Port device team_slave_1 added [ 791.716578][T13286] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.718551][T13286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.862479][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.864941][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.872452][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.882828][T13283] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.884727][T13283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.898328][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.900221][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.913282][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.924382][T15051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 791.947298][T15051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 791.954796][T15051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 792.003995][T15051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 792.035493][T15159] hsr_slave_0: entered promiscuous mode [ 792.037576][T15159] hsr_slave_1: entered promiscuous mode [ 792.039415][T15159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.041395][T15159] Cannot create hsr debugfs directory [ 792.125123][T15054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.158835][T15051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.205627][T15051] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.235329][T10913] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.237257][T10913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.252182][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.254071][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.501559][T15051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.555148][T15051] veth0_vlan: entered promiscuous mode [ 792.823419][T15051] veth1_vlan: entered promiscuous mode [ 792.840680][T15051] veth0_macvtap: entered promiscuous mode [ 792.855391][T15054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.859974][T15051] veth1_macvtap: entered promiscuous mode [ 792.870470][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.874290][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.876807][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.879503][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.882883][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.885580][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.888104][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.890799][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.893930][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.896848][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.900454][T15051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.907517][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.910283][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.914469][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.917212][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.919726][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.936501][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.939377][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.942444][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.944967][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.947655][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.956833][T15051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.966529][T15051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.968864][T15051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.971141][T15051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.974969][T15051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.037050][T15054] veth0_vlan: entered promiscuous mode [ 793.124024][T15054] veth1_vlan: entered promiscuous mode [ 793.239496][T15159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 793.252314][T15159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 793.255701][T15159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 793.262029][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.264058][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.281080][T15159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 793.293273][T13289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.295393][T13289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.335346][T15054] veth0_macvtap: entered promiscuous mode [ 793.339052][T15054] veth1_macvtap: entered promiscuous mode [ 793.371182][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.390437][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.399162][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.407710][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.410474][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.413718][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.417109][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.420107][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.423404][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.426697][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.431790][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.435940][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.445264][T15054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.489247][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.561457][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.569111][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.578840][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.582003][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.585108][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.593055][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.617315][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.621953][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.624838][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.627504][T15054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.630251][T15054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.638926][T15054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.722197][ T57] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 793.748270][T15054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.816815][T15054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.821906][T15054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.853097][T15054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.871455][T15256] fuse: Unknown parameter 'ûd¡' [ 793.907283][ T57] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.910886][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 793.914117][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 793.917251][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.920945][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.926857][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.942201][ T57] usb 5-1: config 0 descriptor?? [ 794.000702][T15159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.095105][T15159] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.103963][T10913] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.105863][T10913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.116568][T13283] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.118500][T13283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.172347][T13289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.176117][ T57] usbhid 5-1:0.0: can't add hid device: -71 [ 794.181533][T13289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.184457][ T57] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 794.199622][ T57] usb 5-1: USB disconnect, device number 29 [ 794.256544][T13286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.258891][T13286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.489061][T15159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.578569][T15159] veth0_vlan: entered promiscuous mode [ 794.586774][T15159] veth1_vlan: entered promiscuous mode [ 794.614475][T15245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.614533][T15159] veth0_macvtap: entered promiscuous mode [ 794.624966][T15159] veth1_macvtap: entered promiscuous mode [ 794.634372][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.637158][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.639688][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.642562][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.645096][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.647832][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.650376][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.653398][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.655944][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.658662][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.661196][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.664877][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.667448][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.670166][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.675670][T15159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.821784][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.824724][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.827435][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.830263][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.833706][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.837712][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.840817][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.844096][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.846644][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.849381][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.852212][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.856108][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.859741][T15159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.863525][T15159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.867785][T15159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.884349][T15159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.886761][T15159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.889047][T15159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.891321][T15159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.977978][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.981423][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.995818][T13283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.001324][T13283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.780226][T15288] lo speed is unknown, defaulting to 1000 [ 797.079972][T13289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.372431][T13289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.439316][ T8349] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 797.512537][ T8349] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 797.541989][ T8349] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 797.569978][T13289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.696660][ T8349] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 797.699784][ T8349] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 797.703212][ T8349] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 797.792759][T13289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.806837][T15303] lo speed is unknown, defaulting to 1000 [ 797.813267][T15307] fuse: Unknown parameter 'ûd¡' [ 798.646759][T15304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.683800][T15303] chnl_net:caif_netlink_parms(): no params data found [ 798.700300][T13289] bridge_slave_1: left allmulticast mode [ 798.703581][T13289] bridge_slave_1: left promiscuous mode [ 798.705149][T13289] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.711473][T13289] bridge_slave_0: left allmulticast mode [ 798.713359][T13289] bridge_slave_0: left promiscuous mode [ 798.714865][T13289] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.846587][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2348'. [ 798.954597][T15320] usb usb8: usbfs: process 15320 (syz.0.2348) did not claim interface 0 before use [ 799.210137][T13289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.257799][T13289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.266337][T13289] bond0 (unregistering): Released all slaves [ 799.328399][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 799.328409][ T39] audit: type=1326 audit(1729721959.150:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15324 comm="syz.2.2342" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x0 [ 799.385747][T15317] netdevsim netdevsim0: Direct firmware load for .Þ failed with error -2 [ 799.397023][T15317] netdevsim netdevsim0: Falling back to sysfs fallback for: .Þ [ 799.425372][T15326] lo speed is unknown, defaulting to 1000 [ 799.722072][ T5405] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 799.801852][ T5357] Bluetooth: hci9: command tx timeout [ 799.803629][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.805975][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.807847][T15303] bridge_slave_0: entered allmulticast mode [ 799.809950][T15303] bridge_slave_0: entered promiscuous mode [ 799.814641][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.817366][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.819930][T15303] bridge_slave_1: entered allmulticast mode [ 799.822046][T15303] bridge_slave_1: entered promiscuous mode [ 799.875052][T15303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.908134][T15303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.963036][ T5405] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.966063][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 799.978936][ T5405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 799.981490][ T5405] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.991655][ T5405] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.995156][ T5405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.030920][ T5405] usb 6-1: config 0 descriptor?? [ 800.054178][T13289] hsr_slave_0: left promiscuous mode [ 800.063549][T13289] hsr_slave_1: left promiscuous mode [ 800.082640][T13289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.085143][T13289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.088191][T13289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.090654][T13289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.179516][T13289] veth1_macvtap: left promiscuous mode [ 800.181379][T13289] veth0_macvtap: left promiscuous mode [ 800.183475][T13289] veth1_vlan: left promiscuous mode [ 800.185387][T13289] veth0_vlan: left promiscuous mode [ 800.283609][ T5405] usbhid 6-1:0.0: can't add hid device: -71 [ 800.285289][ T5405] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 800.296493][ T5405] usb 6-1: USB disconnect, device number 41 [ 801.591831][T15230] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 801.871793][T15230] usb 5-1: Using ep0 maxpacket: 8 [ 801.875127][T15230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 801.878149][T15230] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 801.880800][T15230] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 801.881794][ T5357] Bluetooth: hci9: command tx timeout [ 801.885252][T15230] usb 5-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 801.887967][T15230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 801.890058][T15230] usb 5-1: SerialNumber: syz [ 801.896359][T15360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 801.898807][T15230] hub 5-1:1.0: bad descriptor, ignoring hub [ 801.900407][T15230] hub 5-1:1.0: probe with driver hub failed with error -5 [ 802.111007][T15360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 802.554957][T13289] team0 (unregistering): Port device team_slave_1 removed [ 802.813656][T13289] team0 (unregistering): Port device team_slave_0 removed [ 803.971823][ T5357] Bluetooth: hci9: command tx timeout [ 804.317225][T15303] team0: Port device team_slave_0 added [ 804.346821][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 804.350546][T15364] bridge_slave_1: left allmulticast mode [ 804.352266][T15364] bridge_slave_1: left promiscuous mode [ 804.357823][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.378297][T15230] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 804.383308][T15360] lo speed is unknown, defaulting to 1000 [ 804.434760][T15303] team0: Port device team_slave_1 added [ 804.645164][T15303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.647220][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.666110][T15303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.688226][T15303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.690423][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.707795][T15303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.730382][T15373] pim6reg: entered allmulticast mode [ 804.803097][T15303] hsr_slave_0: entered promiscuous mode [ 804.805964][T15303] hsr_slave_1: entered promiscuous mode [ 804.809047][T15303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 804.811031][T15303] Cannot create hsr debugfs directory [ 804.826999][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 804.848857][T15385] netdevsim netdevsim2: Direct firmware load for .Þ failed with error -2 [ 804.853927][T15385] netdevsim netdevsim2: Falling back to sysfs fallback for: .Þ [ 804.895816][T15386] usb usb8: usbfs: process 15386 (syz.2.2356) did not claim interface 0 before use [ 805.781953][ T30] usb 5-1: USB disconnect, device number 30 [ 805.784104][ T30] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 805.882325][T15398] kvm: kvm [15397]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 806.056915][ T5357] Bluetooth: hci9: command tx timeout [ 806.687030][T15303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 806.743217][T15303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 806.789210][T15303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 806.810273][T15303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 806.974395][T15418] 9pnet_fd: Insufficient options for proto=fd [ 807.058908][T15303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.101226][T15303] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.111918][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.113793][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.122374][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.124252][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.389422][T15303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.486204][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.487888][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.573288][T15303] veth0_vlan: entered promiscuous mode [ 807.601407][T15303] veth1_vlan: entered promiscuous mode [ 807.612061][T15303] veth0_macvtap: entered promiscuous mode [ 807.615536][T15303] veth1_macvtap: entered promiscuous mode [ 807.622124][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.624852][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.627378][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.630110][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.634463][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.637298][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.639834][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.642644][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.645281][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.655376][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.657967][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.660661][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.663402][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.666238][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.670938][T15303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.684285][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.687269][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.689817][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.694624][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.697225][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.699915][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.703215][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.705939][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.708630][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.711512][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.714392][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.717115][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.719786][T15303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.722700][T15303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.727836][T15303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.734792][T15303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.737236][T15303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.739599][T15303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.742645][T15303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.752167][T15433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 807.811156][T13286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.829897][T13286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.868345][T13283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.870574][T13283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.120086][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 808.142663][T15443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.145043][T15443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.148683][T15443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.151235][T15443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.344437][T15452] 9pnet_fd: Insufficient options for proto=fd [ 809.199602][T15468] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2365'. [ 809.746720][T15477] kvm: kvm [15476]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004a) [ 810.963186][T15488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2368'. [ 812.596491][T15507] 9pnet_fd: Insufficient options for proto=fd [ 813.712649][T15518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2375'. [ 813.856190][T15523] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2376'. [ 814.853134][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2378'. [ 814.907238][T15535] lo speed is unknown, defaulting to 1000 [ 814.967165][ T39] audit: type=1326 audit(1729721974.690:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 814.980984][ T39] audit: type=1326 audit(1729721974.690:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.135760][ T39] audit: type=1326 audit(1729721974.690:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.143163][ T39] audit: type=1326 audit(1729721974.690:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.150609][ T39] audit: type=1326 audit(1729721974.690:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.156642][ T39] audit: type=1326 audit(1729721974.690:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.162898][ T39] audit: type=1326 audit(1729721974.690:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.168969][ T39] audit: type=1326 audit(1729721974.690:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.175635][ T39] audit: type=1326 audit(1729721974.700:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 815.181571][ T39] audit: type=1326 audit(1729721974.700:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15530 comm="syz.0.2378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 816.521838][ T5407] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 816.873873][ T5407] usb 7-1: Using ep0 maxpacket: 8 [ 816.898087][ T5407] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 816.900406][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 816.904224][ T5407] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 816.907807][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 816.911241][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 816.936337][ T5407] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 816.938440][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 816.942133][ T5407] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 816.945240][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 816.948882][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 816.954571][ T5407] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 816.957336][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 816.960533][ T5407] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 816.963682][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 816.966677][ T5407] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 816.981628][ T5407] usb 7-1: string descriptor 0 read error: -22 [ 816.983439][ T5407] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 816.989423][ T5407] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.014350][ T5407] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 817.094379][T15579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2389'. [ 817.365111][ T5407] usb 7-1: USB disconnect, device number 25 [ 818.618561][T15603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'. [ 819.094004][T15603] lo speed is unknown, defaulting to 1000 [ 821.441894][ T981] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 821.752004][ T981] usb 7-1: device descriptor read/64, error -71 [ 822.011830][ T981] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 822.141919][ T981] usb 7-1: device descriptor read/64, error -71 [ 822.251875][ T981] usb usb7-port1: attempt power cycle [ 822.603184][ T981] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 822.648882][ T981] usb 7-1: device descriptor read/8, error -71 [ 822.797463][T15655] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 822.959405][T15658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2408'. [ 822.994956][T15655] team0: Port device netdevsim0 added [ 823.066696][T15654] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 823.119049][ T981] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 823.164936][ T981] usb 7-1: device descriptor read/8, error -71 [ 823.194262][T15658] 9pnet_fd: Insufficient options for proto=fd [ 823.204758][T15654] team0: Port device netdevsim0 removed [ 823.207641][T15654] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 823.316842][ T981] usb usb7-port1: unable to enumerate USB device [ 823.844350][T15668] netlink: 'syz.3.2410': attribute type 10 has an invalid length. [ 823.847185][T15668] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2410'. [ 823.847900][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 823.847914][ T39] audit: type=1326 audit(1729721983.670:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 823.851347][T15668] team0: Port device virt_wifi0 added [ 823.893705][ T39] audit: type=1326 audit(1729721983.670:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.041604][ T39] audit: type=1326 audit(1729721983.860:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.069899][ T39] audit: type=1326 audit(1729721983.870:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.116824][ T39] audit: type=1326 audit(1729721983.870:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.143337][ T39] audit: type=1326 audit(1729721983.870:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.150689][ T39] audit: type=1326 audit(1729721983.870:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.168862][ T39] audit: type=1326 audit(1729721983.880:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.187865][ T39] audit: type=1326 audit(1729721983.890:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.212026][ T39] audit: type=1326 audit(1729721983.890:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15666 comm="syz.3.2410" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 824.419162][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'. [ 824.727769][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 825.300997][T15700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2416'. [ 825.314163][T15700] input: syz1 as /devices/virtual/input/input32 [ 825.329938][T15700] openvswitch: netlink: Actions may not be safe on all matching packets [ 825.429193][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 825.452298][T15705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2418'. [ 825.455906][T15705] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 825.532320][T15707] input: syz1 as /devices/virtual/input/input33 [ 826.800852][ T1998] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 827.129263][ T1998] usb 6-1: device descriptor read/64, error -71 [ 827.373342][ T1998] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 827.511853][ T1998] usb 6-1: device descriptor read/64, error -71 [ 827.627754][ T1998] usb usb6-port1: attempt power cycle [ 827.972137][ T1998] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 827.993312][ T1998] usb 6-1: device descriptor read/8, error -71 [ 828.123671][T15747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2429'. [ 828.143480][T15747] input: syz1 as /devices/virtual/input/input35 [ 828.189088][T15747] openvswitch: netlink: Actions may not be safe on all matching packets [ 828.231971][ T1998] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 828.257081][ T1998] usb 6-1: device descriptor read/8, error -71 [ 828.361939][ T1998] usb usb6-port1: unable to enumerate USB device [ 828.591878][ T8413] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 828.611875][ T57] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 828.763379][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.766463][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 828.770329][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 828.774105][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.777718][ T8413] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 828.791062][ T8413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.794837][ T8413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.797466][ T8413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 828.802779][ T57] usb 8-1: config 0 descriptor?? [ 828.811248][ T8413] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 828.818138][ T8413] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 828.821678][ T8413] usb 5-1: Manufacturer: syz [ 828.832979][ T8413] usb 5-1: config 0 descriptor?? [ 829.223229][ T57] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 829.225352][ T57] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 829.238116][ T57] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 829.264349][ T57] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 829.275871][ T8413] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 829.289058][ T8413] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 829.302020][ T8413] appleir 0003:05AC:8243.0013: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 829.486716][ T8385] usb 8-1: USB disconnect, device number 34 [ 829.559413][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 829.559537][ T39] audit: type=1326 audit(1729721989.380:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.571241][ T39] audit: type=1326 audit(1729721989.380:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.579460][ T39] audit: type=1326 audit(1729721989.380:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.585852][ T39] audit: type=1326 audit(1729721989.380:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.593299][ T39] audit: type=1326 audit(1729721989.380:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.600087][ T39] audit: type=1326 audit(1729721989.380:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.613853][ T39] audit: type=1326 audit(1729721989.380:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.625352][ T39] audit: type=1326 audit(1729721989.380:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.631183][ T39] audit: type=1326 audit(1729721989.380:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.639073][ T39] audit: type=1326 audit(1729721989.380:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.1.2433" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 829.666801][T15768] program syz.2.2436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 829.979274][T15773] netlink: 'syz.2.2437': attribute type 10 has an invalid length. [ 829.989918][T15773] team0: Port device netdevsim0 added [ 829.998358][T15773] netlink: 'syz.2.2437': attribute type 10 has an invalid length. [ 830.008854][T15773] team0: Port device netdevsim0 removed [ 830.014749][T15773] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 830.905482][T15783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2439'. [ 831.071751][ T30] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 831.201873][ T30] usb 7-1: device descriptor read/64, error -71 [ 831.242652][ T5405] usb 5-1: USB disconnect, device number 31 [ 831.451892][ T30] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 831.601931][ T30] usb 7-1: device descriptor read/64, error -71 [ 831.712091][ T30] usb usb7-port1: attempt power cycle [ 832.051804][ T30] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 832.072617][ T30] usb 7-1: device descriptor read/8, error -71 [ 832.314727][ T30] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 832.337187][ T30] usb 7-1: device descriptor read/8, error -71 [ 832.445052][ T30] usb usb7-port1: unable to enumerate USB device [ 832.993449][T15819] netlink: 'syz.1.2450': attribute type 10 has an invalid length. [ 834.092980][T15819] team0: Port device netdevsim0 added [ 834.095103][T15820] netlink: 'syz.1.2450': attribute type 10 has an invalid length. [ 834.106465][T15820] team0: Port device netdevsim0 removed [ 834.109344][T15820] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 834.243776][T15828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2454'. [ 835.415503][T15831] 9pnet_fd: Insufficient options for proto=fd [ 835.714605][T15844] netlink: 'syz.2.2457': attribute type 10 has an invalid length. [ 835.856485][T15844] bond0: (slave netdevsim0): Releasing backup interface [ 835.861138][T15844] team0: Port device netdevsim0 added [ 835.863608][T15845] netlink: 'syz.2.2457': attribute type 10 has an invalid length. [ 835.876520][T15845] team0: Port device netdevsim0 removed [ 835.879647][T15845] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 835.933147][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 836.675737][T15865] mkiss: ax0: crc mode is auto. [ 838.088224][T15875] netlink: 'syz.0.2465': attribute type 10 has an invalid length. [ 838.098109][T15875] team0: Port device netdevsim0 added [ 838.109337][T15875] netlink: 'syz.0.2465': attribute type 10 has an invalid length. [ 838.117305][T15875] team0: Port device netdevsim0 removed [ 838.121127][T15875] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 838.795750][T15880] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2467'. [ 838.798725][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 838.801458][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 838.815632][T15880] random: crng reseeded on system resumption [ 838.944871][T15883] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 838.953642][T15883] bond0: (slave netdevsim0): Releasing backup interface [ 838.960394][T15883] team0: Port device netdevsim0 added [ 838.966129][T15883] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 838.988586][T15883] team0: Port device netdevsim0 removed [ 838.995023][T15883] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 839.591460][T15876] Process accounting resumed [ 840.074062][T15891] random: crng reseeded on system resumption [ 841.000406][T15900] overlayfs: missing 'lowerdir' [ 842.370188][T15914] block nbd2: shutting down sockets [ 844.199765][T15943] 9pnet_fd: Insufficient options for proto=fd [ 844.319562][T15947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2481'. [ 845.085002][T15972] 9pnet_fd: Insufficient options for proto=fd [ 845.372849][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2495'. [ 845.404751][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2495'. [ 845.515039][T15988] overlayfs: failed to resolve './file1': -2 [ 845.797478][T15997] 9pnet_fd: Insufficient options for proto=fd [ 846.229886][T16002] overlayfs: missing 'lowerdir' [ 846.437615][T16006] netlink: 'syz.1.2500': attribute type 10 has an invalid length. [ 846.547039][T16006] bond0: (slave netdevsim0): Releasing backup interface [ 846.553539][T16006] team0: Port device netdevsim0 added [ 846.555883][T16007] netlink: 'syz.1.2500': attribute type 10 has an invalid length. [ 846.562806][T16007] team0: Port device netdevsim0 removed [ 846.566431][T16007] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 846.842932][ T1448] libceph: connect (1)[c::]:6789 error -101 [ 846.844572][ T1448] libceph: mon0 (1)[c::]:6789 connect error [ 846.941140][T16013] lo speed is unknown, defaulting to 1000 [ 847.102047][ T1448] libceph: connect (1)[c::]:6789 error -101 [ 847.103701][ T1448] libceph: mon0 (1)[c::]:6789 connect error [ 847.571459][ T1998] kernel write not supported for file /cpuinfo (pid: 1998 comm: kworker/0:2) [ 847.597853][T16010] ceph: No mds server is up or the cluster is laggy [ 847.612265][ T1448] libceph: connect (1)[c::]:6789 error -101 [ 847.614035][ T1448] libceph: mon0 (1)[c::]:6789 connect error [ 847.734402][ T8349] Bluetooth: Wrong link type (-71) [ 847.889007][T16038] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2509'. [ 848.107754][T16041] 9pnet_fd: Insufficient options for proto=fd [ 849.104678][T16047] netlink: 'syz.2.2510': attribute type 10 has an invalid length. [ 849.112591][T16047] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.114624][T16047] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.130336][T16047] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.132301][T16047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.134290][T16047] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.136181][T16047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.139838][T16047] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 849.252671][T16050] netlink: 'syz.3.2511': attribute type 10 has an invalid length. [ 849.266645][T16050] bond0: (slave netdevsim0): Releasing backup interface [ 849.273707][T16050] team0: Port device netdevsim0 added [ 849.280351][T16050] netlink: 'syz.3.2511': attribute type 10 has an invalid length. [ 849.309625][T16050] team0: Port device netdevsim0 removed [ 849.321302][T16050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 849.433743][T16052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2512'. [ 849.436294][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 849.442031][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 849.532363][T16052] random: crng reseeded on system resumption [ 850.112194][T16070] ip6gre1: entered allmulticast mode [ 850.157679][T16052] Process accounting resumed [ 850.491632][T16073] sp0: Synchronizing with TNC [ 850.551328][T16083] 9pnet_fd: Insufficient options for proto=fd [ 851.466886][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 851.468500][T16108] binder: 16107:16108 ioctl 4018620d 20000100 returned -16 [ 851.470414][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 851.478685][T16108] binder: 16107:16108 ioctl 4018620d 20000100 returned -16 [ 851.480632][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 851.482617][T16108] binder: 16107:16108 ioctl 4018620d 20000100 returned -16 [ 851.484563][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 851.486128][T16108] binder: 16107:16108 ioctl 4018620d 20000100 returned -16 [ 851.488432][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 851.490662][T16108] binder: 16107:16108 ioctl 4018620d 20000100 returned -16 [ 851.493065][T16108] binder: BINDER_SET_CONTEXT_MGR already set [ 851.494664][T16108] binder: 16107:16108 ioctl 4018620d 20000100 returned -16 [ 851.936371][T16132] 9pnet_fd: Insufficient options for proto=fd [ 852.021419][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 853.339948][T16141] syz.3.2536 (16141) used greatest stack depth: 20128 bytes left [ 854.051824][T15230] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 854.056356][T16163] block nbd3: shutting down sockets [ 854.246962][T15230] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 854.249838][T15230] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 854.252616][T15230] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 854.255135][T15230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.306514][T16157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 854.309738][T15230] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.744201][T16194] 9pnet_fd: Insufficient options for proto=fd [ 856.582785][T16198] random: crng reseeded on system resumption [ 856.752644][T16198] syz.0.2550 (16198) used greatest stack depth: 19712 bytes left [ 857.400185][ T5406] usb 7-1: USB disconnect, device number 34 [ 857.556886][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 857.559383][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 857.561795][T16215] netlink: 'syz.2.2554': attribute type 20 has an invalid length. [ 857.610381][T16217] FAULT_INJECTION: forcing a failure. [ 857.610381][T16217] name failslab, interval 1, probability 0, space 0, times 0 [ 857.614397][T16217] CPU: 3 UID: 0 PID: 16217 Comm: syz.2.2555 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 857.617165][T16217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 857.620050][T16217] Call Trace: [ 857.620949][T16217] [ 857.621763][T16217] dump_stack_lvl+0x16c/0x1f0 [ 857.623010][T16217] should_fail_ex+0x497/0x5b0 [ 857.624266][T16217] ? __pfx_mark_lock+0x10/0x10 [ 857.625548][T16217] should_failslab+0xc2/0x120 [ 857.626790][T16217] __kmalloc_cache_noprof+0x6b/0x310 [ 857.628190][T16217] ? sctp_sched_prio_set+0x42e/0x820 [ 857.629608][T16217] sctp_sched_prio_set+0x42e/0x820 [ 857.630976][T16217] ? sctp_sched_prio_init_sid+0x64/0x100 [ 857.632468][T16217] sctp_sched_set_sched+0x210/0x470 [ 857.633873][T16217] sctp_setsockopt+0x5bd8/0xb880 [ 857.635191][T16217] ? __pfx_sctp_setsockopt+0x10/0x10 [ 857.636809][T16217] ? __pfx_aa_sk_perm+0x10/0x10 [ 857.638110][T16217] ? sock_common_setsockopt+0x2e/0xf0 [ 857.639533][T16217] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 857.641094][T16217] do_sock_setsockopt+0x222/0x480 [ 857.642427][T16217] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 857.643893][T16217] ? fdget+0x176/0x210 [ 857.644989][T16217] __sys_setsockopt+0x1a4/0x270 [ 857.646273][T16217] ? __pfx___sys_setsockopt+0x10/0x10 [ 857.647674][T16217] ? fput+0x30/0x390 [ 857.648722][T16217] ? ksys_write+0x1ad/0x260 [ 857.649913][T16217] ? __pfx_ksys_write+0x10/0x10 [ 857.651195][T16217] __ia32_sys_setsockopt+0xbc/0x160 [ 857.652570][T16217] ? lockdep_hardirqs_on+0x7c/0x110 [ 857.653937][T16217] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 857.655648][T16217] __do_fast_syscall_32+0x73/0x120 [ 857.657023][T16217] do_fast_syscall_32+0x32/0x80 [ 857.658307][T16217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 857.659956][T16217] RIP: 0023:0xf7f55579 [ 857.661035][T16217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 857.666019][T16217] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 857.668170][T16217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 857.670232][T16217] RDX: 000000000000007b RSI: 00000000200002c0 RDI: 0000000000000008 [ 857.672265][T16217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 857.674309][T16217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 857.676370][T16217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 857.678428][T16217] [ 857.877725][T16225] fuse: Bad value for 'fd' [ 858.170471][T16232] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 858.171192][T16230] IPVS: stopping master sync thread 16232 ... [ 858.173263][T16230] ./file0: Can't lookup blockdev [ 860.217784][T16244] netlink: 'syz.2.2563': attribute type 4 has an invalid length. [ 860.219726][T16244] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2563'. [ 860.224394][T16245] netlink: 'syz.2.2563': attribute type 4 has an invalid length. [ 860.226726][T16245] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2563'. [ 860.309539][T16249] FAULT_INJECTION: forcing a failure. [ 860.309539][T16249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.314353][T16249] CPU: 0 UID: 0 PID: 16249 Comm: syz.2.2565 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 860.316989][T16249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 860.319629][T16249] Call Trace: [ 860.320471][T16249] [ 860.321227][T16249] dump_stack_lvl+0x16c/0x1f0 [ 860.322564][T16249] should_fail_ex+0x497/0x5b0 [ 860.323759][T16249] _copy_to_user+0x30/0xc0 [ 860.324896][T16249] simple_read_from_buffer+0xd0/0x160 [ 860.326229][T16249] proc_fail_nth_read+0x198/0x270 [ 860.327514][T16249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 860.328947][T16249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 860.330324][T16249] vfs_read+0x1ce/0xbd0 [ 860.331413][T16249] ? __fget_files+0x23a/0x3f0 [ 860.332643][T16249] ? fdget_pos+0x24c/0x360 [ 860.334013][T16249] ? __pfx_lock_release+0x10/0x10 [ 860.335344][T16249] ? trace_lock_acquire+0x14a/0x1d0 [ 860.336662][T16249] ? __pfx_vfs_read+0x10/0x10 [ 860.337854][T16249] ? __pfx___mutex_lock+0x10/0x10 [ 860.339163][T16249] ? __fget_files+0x244/0x3f0 [ 860.340366][T16249] ksys_read+0x12f/0x260 [ 860.341399][T16249] ? __pfx_ksys_read+0x10/0x10 [ 860.342595][T16249] __do_fast_syscall_32+0x73/0x120 [ 860.343881][T16249] do_fast_syscall_32+0x32/0x80 [ 860.345121][T16249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 860.346772][T16249] RIP: 0023:0xf7f55579 [ 860.347845][T16249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 860.352968][T16249] RSP: 002b:00000000f56d65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 860.355124][T16249] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56d6620 [ 860.357197][T16249] RDX: 000000000000000f RSI: 00000000f73dbff4 RDI: 0000000000000000 [ 860.359203][T16249] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 860.361171][T16249] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 860.363067][T16249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.365106][T16249] [ 860.574970][T16242] block nbd0: shutting down sockets [ 860.956364][T16262] 9pnet_fd: Insufficient options for proto=fd [ 862.630719][T16275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.391958][T16297] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 864.652424][T16305] fuse: Bad value for 'fd' [ 865.062455][T16311] ./file0: Can't lookup blockdev [ 865.410633][T16309] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 865.410742][T16310] IPVS: stopping master sync thread 16309 ... [ 865.645322][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2585'. [ 865.649741][T16326] IPVS: length: 54 != 24 [ 865.658501][T16326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2585'. [ 866.037309][T16337] ax25_connect(): syz.2.2586 uses autobind, please contact jreuter@yaina.de [ 866.042701][T16343] overlayfs: missing 'lowerdir' [ 867.324726][T16353] netlink: 'syz.0.2593': attribute type 2 has an invalid length. [ 867.341326][T16353] : entered promiscuous mode [ 867.485037][T16354] 9pnet_fd: Insufficient options for proto=fd [ 868.215634][T16357] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 868.223988][T16357] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 868.924174][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.924217][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.731897][ T57] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 869.885264][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.890499][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 869.896104][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.900236][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.907848][ T57] usb 5-1: config 0 descriptor?? [ 869.928459][ T57] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 870.133805][ T57] usb 5-1: USB disconnect, device number 32 [ 870.750561][T16392] netlink: 'syz.0.2604': attribute type 4 has an invalid length. [ 872.141787][ T57] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 872.300238][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.303813][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 872.308132][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 872.311042][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.318846][ T57] usb 8-1: config 0 descriptor?? [ 872.326940][ T57] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 872.538225][ T57] usb 8-1: USB disconnect, device number 35 [ 873.146034][T16437] 9pnet_fd: Insufficient options for proto=fd [ 873.514081][T16440] /dev/sr0: Can't open blockdev [ 874.175712][T16456] binder: 16446:16456 ioctl 5412 20000200 returned -22 [ 874.386645][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 874.503636][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 875.597236][T16466] netlink: 'syz.2.2626': attribute type 63 has an invalid length. [ 875.836719][T16474] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.001466][T16474] netlink: 'syz.1.2627': attribute type 4 has an invalid length. [ 876.094426][T16478] netlink: 'syz.1.2627': attribute type 4 has an invalid length. [ 876.161782][ T35] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 876.265792][T16474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2627'. [ 876.313331][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.315749][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 876.318900][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.321143][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.325387][ T35] usb 7-1: config 0 descriptor?? [ 876.332516][ T35] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 876.542146][ T5405] usb 7-1: USB disconnect, device number 35 [ 884.747447][T14978] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 884.770870][T14978] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 884.774231][T14978] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 884.794844][T14978] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 884.804277][T14978] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 884.808431][T14978] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 885.261836][T16498] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2635'. [ 885.277316][T16494] lo speed is unknown, defaulting to 1000 [ 885.548027][T16498] sctp: [Deprecated]: syz.1.2635 (pid 16498) Use of int in max_burst socket option deprecated. [ 885.548027][T16498] Use struct sctp_assoc_value instead [ 886.362628][ T8349] Bluetooth: hci8: command 0x0406 tx timeout [ 886.442886][T16494] chnl_net:caif_netlink_parms(): no params data found [ 886.899933][T16494] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.912447][T16494] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.927436][T16494] bridge_slave_0: entered allmulticast mode [ 886.930835][T16494] bridge_slave_0: entered promiscuous mode [ 886.959342][T16494] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.962362][T16494] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.964928][T16494] bridge_slave_1: entered allmulticast mode [ 886.968004][T16494] bridge_slave_1: entered promiscuous mode [ 887.001987][ T5357] Bluetooth: hci11: command tx timeout [ 887.112787][T16494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.116488][T16494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.248368][T16494] team0: Port device team_slave_0 added [ 887.266606][T16494] team0: Port device team_slave_1 added [ 887.354121][T16494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.355981][T16494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.365260][T16494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.369293][T16494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.371147][T16494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.411932][T16494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.628630][T16494] hsr_slave_0: entered promiscuous mode [ 887.773485][T16494] hsr_slave_1: entered promiscuous mode [ 887.776969][T16494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.781318][T16494] Cannot create hsr debugfs directory [ 888.393661][T16494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.586758][T16494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.681048][T16494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.691428][T16488] netlink: 'syz.0.2631': attribute type 10 has an invalid length. [ 888.726807][T16488] bond0: (slave netdevsim0): Releasing backup interface [ 888.768528][T16488] team0: Port device netdevsim0 added [ 888.802822][T16494] bond0: (slave netdevsim0): Releasing backup interface [ 888.851285][T16494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.081828][ T5357] Bluetooth: hci11: command tx timeout [ 889.110814][T16494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 889.126625][T16494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 889.148232][T16494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 889.152742][T16494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 889.216040][T16494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.224114][T16494] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.231539][T10913] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.233699][T10913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.293369][T10913] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.295945][T10913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.346060][T16488] netlink: 'syz.0.2631': attribute type 10 has an invalid length. [ 889.418866][T16488] team0: Port device netdevsim0 removed [ 889.425947][T16488] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 889.526343][T10183] syz_tun (unregistering): left promiscuous mode [ 889.612163][T10913] bridge_slave_1: left allmulticast mode [ 889.613777][T10913] bridge_slave_1: left promiscuous mode [ 889.615407][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.652676][T10913] bridge_slave_0: left allmulticast mode [ 889.654177][T10913] bridge_slave_0: left promiscuous mode [ 889.657037][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.203982][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.215098][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.225705][T10913] bond0 (unregistering): Released all slaves [ 890.345360][T16494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.449296][T16494] veth0_vlan: entered promiscuous mode [ 890.462722][T16494] veth1_vlan: entered promiscuous mode [ 890.518109][T16494] veth0_macvtap: entered promiscuous mode [ 890.523005][T16494] veth1_macvtap: entered promiscuous mode [ 890.535343][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.538097][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.540573][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.544264][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.549648][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.552768][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.556950][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.562005][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.564728][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.567612][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.570459][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.578337][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.581021][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.588380][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.593000][T16494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.613538][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.616593][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.619332][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.622230][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.624733][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.627598][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.630350][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.633368][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.636062][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.638914][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.641603][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.644473][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.647130][T16494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.649898][T16494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.657648][T16494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.665804][T16494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.668070][T16494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.670330][T16494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.677109][T16494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.681588][T10913] batadv_slave_0: left promiscuous mode [ 890.761228][T10913] hsr_slave_0: left promiscuous mode [ 890.767347][T10913] hsr_slave_1: left promiscuous mode [ 890.770351][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.772600][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.780085][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.783271][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.870133][T10913] veth1_macvtap: left promiscuous mode [ 890.877943][T10913] veth0_macvtap: left promiscuous mode [ 890.951526][T10913] infiniband syz0: set down [ 891.161842][ T5357] Bluetooth: hci11: command tx timeout [ 892.552662][ T8413] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 892.951817][T10913] team0 (unregistering): Port device team_slave_1 removed [ 893.231805][ T8413] usb 6-1: Using ep0 maxpacket: 8 [ 893.244619][ T8413] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.244912][ T5357] Bluetooth: hci11: command tx timeout [ 893.247253][ T8413] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 893.247268][ T8413] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 893.247316][ T8413] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 893.247329][ T8413] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.247347][ T8413] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.247398][ T8413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.320019][T10913] team0 (unregistering): Port device team_slave_0 removed [ 893.466529][ T8413] usb 6-1: GET_CAPABILITIES returned 0 [ 893.468058][ T8413] usbtmc 6-1:16.0: can't read capabilities [ 893.523825][T16553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2641'. Connection to localhost closed by remote host. [ 895.307140][T13286] smc: removing ib device syz0 [ 895.316772][ T1448] lo speed is unknown, defaulting to 1000 [ 896.224526][ T5406] usb 6-1: USB disconnect, device number 46 [ 896.862655][T10913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.463105][T10913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.645309][T10913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.713994][T10913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.860849][T10913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.956245][T10913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.072334][T10913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.156316][T10913] bond0: (slave netdevsim0): Releasing backup interface [ 898.160624][T10913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.336227][T10913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.402895][T10913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.482814][T10913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.572527][T10913] bond0: (slave netdevsim0): Releasing backup interface [ 898.583259][T10913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.738832][T10913] bridge_slave_1: left allmulticast mode [ 898.740931][T10913] bridge_slave_1: left promiscuous mode [ 898.743693][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.750208][T10913] bridge_slave_0: left allmulticast mode [ 898.752723][T10913] bridge_slave_0: left promiscuous mode [ 898.754913][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.764105][T10913] bridge_slave_0: left allmulticast mode [ 898.766100][T10913] bridge_slave_0: left promiscuous mode [ 898.768139][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.777198][T10913] bridge_slave_1: left allmulticast mode [ 898.779023][T10913] bridge_slave_1: left promiscuous mode [ 898.780711][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.784339][T10913] bridge_slave_0: left allmulticast mode [ 898.785809][T10913] bridge_slave_0: left promiscuous mode [ 898.787396][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.924813][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.934681][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.940391][T10913] bond0 (unregistering): Released all slaves [ 900.105492][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.115581][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.122000][T10913] bond0 (unregistering): Released all slaves [ 900.305822][T10913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.336632][T10913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.397419][T10913] bond0 (unregistering): Released all slaves [ 900.648058][T10913] : left promiscuous mode [ 901.441812][T10913] hsr_slave_0: left promiscuous mode [ 901.444532][T10913] hsr_slave_1: left promiscuous mode [ 901.447265][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.449159][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.452550][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.454461][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.460364][T10913] hsr_slave_0: left promiscuous mode [ 901.462739][T10913] hsr_slave_1: left promiscuous mode [ 901.464942][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.466706][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.470783][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.476221][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.484200][T10913] hsr_slave_0: left promiscuous mode [ 901.487578][T10913] hsr_slave_1: left promiscuous mode [ 901.490004][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.492133][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.496086][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.497990][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.634066][T10913] veth1_macvtap: left promiscuous mode [ 901.635535][T10913] veth0_macvtap: left promiscuous mode [ 901.636992][T10913] veth1_vlan: left promiscuous mode [ 901.638373][T10913] veth0_vlan: left promiscuous mode [ 901.641330][T10913] veth1_macvtap: left promiscuous mode [ 901.642847][T10913] veth0_macvtap: left promiscuous mode [ 901.644562][T10913] veth1_vlan: left promiscuous mode [ 901.645899][T10913] veth0_vlan: left promiscuous mode [ 901.665539][T10913] veth1_macvtap: left promiscuous mode [ 901.667098][T10913] veth0_macvtap: left promiscuous mode [ 901.668424][T10913] veth1_vlan: left promiscuous mode [ 901.669707][T10913] veth0_vlan: left promiscuous mode [ 903.428914][T10913] team0 (unregistering): Port device team_slave_1 removed [ 903.590678][T10913] team0 (unregistering): Port device team_slave_0 removed [ 904.764822][T10913] pim6reg (unregistering): left allmulticast mode [ 905.925408][T10913] team0 (unregistering): Port device team_slave_1 removed [ 906.150669][T10913] team0 (unregistering): Port device team_slave_0 removed [ 908.421000][T10913] team0 (unregistering): Port device team_slave_1 removed [ 908.528818][T10913] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:21:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90003037b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b96cb4 RDI=ffffc90003037b60 RBP=ffffffff84b96ca0 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc90003037b28 RIP=ffffffff84b96cdd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057c9e4ac CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008004800 Opmask01=0000000000008000 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff365e4aa0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020636c65642065 2032206565746e20 000a20202d202038 30362074203a2920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90003037a78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90003037ca8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813bb068 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000204a5000 CR3=000000006fd62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000000 Opmask01=0000000000008000 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 72913910dfa36f7c a38475f6130b86a7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d917e83abc40d7d 980de9fb11ffee76 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 189a4a8050a33883 19b8fc142d353554 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0e924ab56209eee 8d3021a889d491fa ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4723ff66d1a4d1d7 dcaad36176aef973 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b8a441baed7c82b 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 640038ddb9d8872e c86870401d28c961 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a7825c100000000 dbf8f15142f984aa ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1cc5277f004c3726 1103b4184eb8a4f6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a7f4c957385deb0a 1daebfe28fc9a901 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020636c65642065 2032206565746e20 000a20202d202038 30362074203a2920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000020fe9b7 RBX=0000000000000002 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036ec000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801b760000 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002057d000 CR3=000000005db52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008004000 Opmask01=0000000000008000 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a45dec3ec8aaa0da 235ab986d4275528 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b479d8ea9c0854e 74179bbd12512fe1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 633f9dbdec76ce64 557d4cd94839c639 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7eed4af92ea3ba4 251e3f9d52363529 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fef7c597ea2d3efd 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47da21c600000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25de6ddfbe626b82 a25761716dacb584 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000053cb1b4d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86162bc841c8c7aa ee7a382bd6048067 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b8c116169c44e03 2b8e4355407f2be4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020636c65642065 2032206565746e20 000a20202d202038 30362074203a2920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=ffffffff96970c18 RCX=ffffffff81696f55 RDX=000000000000122d RSI=1ffffffff267daa3 RDI=0000000000000000 RBP=ffffffff94062ec0 RSP=ffffc9000e67f798 R8 =ffffffff933ed518 R9 =000000000007660d R10=ffffffff96990e87 R11=000000000000004f R12=ffffffff96724020 R13=0000000000076608 R14=000000000007660c R15=dffffc0000000000 RIP=ffffffff81696a84 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002046a000 CR3=0000000000f94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000000 Opmask01=0000000000008000 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe29b7d93e1fa6c3 72692b31fa96d321 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddd5d14ddabd4211 fd4b8222ce71b7e1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35ceac4324b7f826 19b28c4da624d848 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed61f005ee112616 64a3c8fe66675e94 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ce00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16a7a7d698be8a00 4a50e2248eec193e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a7344cf241130da2 25b0711f243b0b15 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dce8d2b800022421 4e4d942a78f42d69 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d068c9053e000002 502f4713bc5145f3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a8bd0e88937bed5 749a9b48c4a881bf ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a273f5c779baabba ed139d630aaafd99 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020636c65642065 2032206565746e20 000a20202d202038 30362074203a2920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000