last executing test programs: 20.492929901s ago: executing program 0 (id=52): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="95f2726d17966fc57ab02aee8545d78210bcf6d3484beced258fdd44cc1149a2be8bc60b22bba8a12a33551dba59ca02eff46f3b6074d7118768b7c3cc0d17df8e1dd246c2448c78501d7984ca7e7a0a38455e49daf761bc4428b7995a5e3232f247a879d0891a38792ae70ca522c95f63f40df38081a5101c5a79408a9e39cb3ca35761f21723bff2524b27d5f40ece2ef49a5df37241c64c61ece6eb938c64c415a3e4", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=0x0], 0x22) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x8aa07000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="a12a12099b629573c39eb04e7b1c8c3c2515fc5bbde5dda9854b29e179071bab74694e88261e07f4d1e51edb41961811262fc83c7fbf67a5f183c344dbd62924b6f9ec8b74d1e63a3385c565284a61a96a6be8e05fc7588a1e19aa0cf3c25b4988dc38f0ba1b0c5dfa5da649b79b1736cf84b6bae042179300e406fe8c615637291bfa3457a51606d08098c06fc49b5e90bd357656e2a7a6ad3f3b6935456784104c5272d0435283c5cc8bd8f29a67823295f900"/194], 0x5c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) preadv(r1, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/108, 0xfffffffffffffd2b}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x825, 0x4, 0x0, 0x4, 0x8000, 0x9, 0x10005, 0x0, 0xffffffff, 0x0, 0x414, 0x2, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x2000, 0x323804}) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) readv(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) write(r1, &(0x7f0000000600)="5d4525aa7a2353ee05eb0a2d01f62fd3ba62a75819d7eaa3c2b79612e4da618d0999ea6ab2a2c1a79b3518ca507c3d8dbeadd69a3dbf762e3ff3fed45b026cfd7cb5ef22f76f4efb98440699196af62c8a2c7533179e5c62e8ee14bb74e8c974ade8f4d9c03d9a577b70ec88587430100ba80eec11e3b3369edb5eb2bd780b7357469862b9e8c9d82b655f496febfba6461e54", 0x93) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) openat$vcsu(0xffffff9c, &(0x7f0000001780), 0x200400, 0x0) 20.123953427s ago: executing program 1 (id=54): socket(0x2, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0xf) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x6}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = io_uring_setup(0x4d63, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="003d95b2c069ade4ad71baaa775f33c929f047f35cbf9492f770c222fbbf9b717fd7dafe02d1b795517e718a0dabf5a79e1884f76eb95a259ef549ffc85437839cea7cf9e490545bcadfe27e770cca22", 0x50}, {&(0x7f0000000180)="3ebb0bc87691898fd23e978e47e904b2a8bc9c829f49bc8a0239b4", 0x1b}], 0x2, 0x0, 0x0, 0x4000800}, 0x0) recvmmsg(r6, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000240)=""/254, 0xfe}], 0x2}}], 0x1, 0x61, 0x0) 17.0085364s ago: executing program 1 (id=57): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0xff, 0x9}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x2, 0x2, 0x8, 0x8, 0x3}, 0x20) r2 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000080)) capset(&(0x7f0000000080), &(0x7f0000000040)={0x0, 0x0, 0x8a}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f40800030006010000040002", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000300)=[{{&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/87, 0x57}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)}, 0x8}], 0x1, 0x40000040, &(0x7f0000000380)={r4, r5+10000000}) r6 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x2040, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x41f, 0x258, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2a, 0x0, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x8660, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB]) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140)=0x20000002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 16.669247178s ago: executing program 0 (id=58): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x25, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000300", @ANYRES32, @ANYBLOB="0000000000000000e7110023ba00c1732663ddb6a007e7842d22d6e58bef827ebaaa6a8aec999504890cccf443a84bc899746183f7c426469676defd028f8503b4f24434b0e4633d2ddea49df52cf502f0b7d79798", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018170000", @ANYRES32, @ANYBLOB="000000000000000085200000020000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ab0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e657464657673696d300800"], 0x34}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) 15.137339242s ago: executing program 1 (id=59): io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xffffffff, 0x4, 0x2, 0x10f}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000001f680)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="158d7abba0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) readv(r0, &(0x7f0000004880)=[{&(0x7f0000002680)=""/148, 0x94}], 0x1) 14.133136041s ago: executing program 0 (id=62): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000005c0)=@v1={0x0, @adiantum, 0x3, @desc4}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) write$cgroup_pressure(r2, &(0x7f0000000000)={'full'}, 0x2f) flock(r1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x111}, 0x1c}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0xd}, 0x8) close(r5) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x8a8fd, 0x0) 14.030412752s ago: executing program 1 (id=63): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x300, 0x135) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r4, 0x5605) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x2, 0x9, 0x2, 0x3, 0x2, [0x49bc90fb, 0x5, 0x0, 0x2]}) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"054b3b0518c45302"}}}}}}}, 0x0) socket$inet(0x2, 0x0, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000019400)=ANY=[@ANYRESDEC, @ANYRES32], 0x10) writev(r4, &(0x7f0000019580)=[{&(0x7f0000000100)="9733824102dc000000", 0x9}, {&(0x7f00000198c0)="fd65e69af21386501e98f8f9d59e2c7fde1d2c3e785626c8496e055499693730a6684f5157ec72c3b8c8d3abeb3851ea6f44cd4a43bcc461756a7c75315be80f6ef2b89ecdd7b1694153768995631f2f906aba1036d9a9c481653fd36793f0e1b888610affa300c26ebc4b8249627aa8801822045bf803405aaf0d568e4dfa", 0x7f}, {&(0x7f0000019480)="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", 0xfc}, {&(0x7f0000019700)="b48ae69ac92f2483911f96a71e49c6c88d97b805519939e415495398ad10195ccb9b6e44585d1d679b4566aa2ba169fd0518d98f0560ff4b25416bfc63aae71ad6fc6d9de92e48d546ead366506779d98b6b3c40e2c5c5a91bb4291829c200cdb1074c00433782c45c1ca8a61098ff421eeae2159317931490c4fb393f08c95aa0ebea16b26b3c331149d36847967bfbc2e3080bfe7763e145122313ef870fd6fe2f9d0345dabe53be46f3068f1cd3842cc5b0577dfdee0b36a10cfec88796da88aa610000", 0xc5}, {&(0x7f00000193c0)="c343e4a91b1b99ef9dba7df8285d56e2281eb9cbb0a37529d0e31748fe97578f9031d9ed7497b4c45acb21004de0a616edd662b881a700000000b866ab1f7b0c", 0x40}], 0x5) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 13.243135041s ago: executing program 0 (id=65): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x31d9, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_RESVSP(r4, 0x402c5839, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8000000009a88}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)}]) io_destroy(0x0) fcntl$setstatus(r3, 0x4, 0x42800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf04", 0x0, 0x8000}, 0x4c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 12.545298386s ago: executing program 1 (id=66): socket$kcm(0x10, 0x3, 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500230085100000f8ffffff18250000", @ANYRES32, @ANYBLOB="0000000063f0d31f18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000951ce005fcf000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008520fffffcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703edff07000000b704000000000000850000008200000018422100fbffffff0000000000000000182a0000cd45940c6273c624719aa27bd10de690538d0744ae5a48", @ANYRES32=r0, @ANYBLOB="00000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000740)={0x5, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r6, 0x800455c9, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 10.812617684s ago: executing program 3 (id=69): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x25, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000003000000", @ANYRES32, @ANYBLOB="0000000000000000e7110023ba00c1732663ddb6a007e7842d22d6e58bef827ebaaa6a8aec999504890cccf443a84bc899746183f7c426469676defd028f8503b4f24434b0e4633d2ddea49df52cf502f0b7d79798", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018170000", @ANYRES32, @ANYBLOB="000000000000000085200000020000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ab0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000100000000e0001006e657464657673696d0000000f0002006e657464657673696d300800"], 0x34}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) 9.852403364s ago: executing program 2 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x5f, 0x37, 0x31, 0x31]}, 0x4e}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36, 0x11]}}, {@inode32}], [{@appraise_type}, {@flag='silent'}, {@flag='posixacl'}]}) 9.777005656s ago: executing program 2 (id=71): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(0x0, 0x0, 0x0) 8.883296443s ago: executing program 2 (id=72): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x80, 0x4) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe4) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0xd) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xf0000018}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x3, 0x0, 0x1, 0x1}}, {{0x4}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4}}], 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x400) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000000)=0x641, 0x4) 8.552607059s ago: executing program 3 (id=73): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0x0, 0x0, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000000e0006"], 0x14}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000800)={0x0, 0xfffffffffffffe60, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020305000000000008000000020000000800010001"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000280)=[r9], 0x1, r10, r5, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r11, &(0x7f0000000300)="60b06c3d1d6f", 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 8.176677099s ago: executing program 3 (id=74): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000140)={0x0, 0x0, r3, 0x0, 0x0, 0x101, 0xfffefffd, 0xffffffff, {0x3, 0x0, 0xe, 0x27ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffb, 0x101, 0x1, 0x0, "d20bddda7d1db9342de76eeda051560ed100"}}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000019340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x5, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000240)={0x0, r6, r7}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r8, &(0x7f0000000100)='./file2\x00') lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r8], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000300000000000000080000027000000122f00002500feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r9, 0x5605) r10 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002ea0000000000000000"], 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) 7.968579777s ago: executing program 2 (id=75): io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xffffffff, 0x4, 0x2, 0x10f}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000001f680)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="158d7abba0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) readv(r0, &(0x7f0000004880)=[{&(0x7f0000002680)=""/148, 0x94}], 0x1) 7.595032069s ago: executing program 3 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe4) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xfc) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x3, 0x0, 0x1, 0x1}}, {{0x4}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4}}], 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000140)=0x40, 0x0, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0080e76c", @ANYRES16=r7, @ANYBLOB="080027bd7000fddbdf25150000004c0007800800010021512c2408000100010000000800020040000000080002000100000008000100000000800c00030005000000000000000c00040006000000000000000800020008000000"], 0x60}, 0x1, 0x0, 0x0, 0xff03d6edb727e388}, 0x40094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0xe97}, {{0x0, 0x0, &(0x7f0000003080)=[{0x0}, {&(0x7f0000003140)=""/182, 0xb6}], 0x2}}], 0x2, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRES8=0x0, @ANYBLOB="543c51bc69654df4588068b11c2813c702f2876b8f56e4f9af9caa9da499b33de323218128e27ce7c700b365945b5595d87cbfe31dd8641ae8e39bff2fb2b85727fcd91f685441ad82224834b3c9b00ad802299dfcb542874175a0775ecf3b2b4a504dc426d3b141b3b439c81c86d47a3541075167653a894f0d9bb8d155266624b501157771119a759cc74d0c6d11893d37e46e124e3c05e9e198d64111e1e19612cdab8de749f47690e0af7962071299d3ebc6b3f34c63188c077006af5a7eb041f0f6f5813dfa"]) 6.706731264s ago: executing program 3 (id=77): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 6.388055397s ago: executing program 2 (id=78): io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xffffffff, 0x4, 0x2, 0x10f}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000001f680)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="158d7abba0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) readv(r0, &(0x7f0000004880)=[{&(0x7f0000002680)=""/148, 0x94}], 0x1) 6.292505544s ago: executing program 2 (id=79): socket$kcm(0x10, 0x3, 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500230085100000f8ffffff18250000", @ANYRES32, @ANYBLOB="0000000063f0d31f18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000951ce005fcf000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008520fffffcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703edff07000000b704000000000000850000008200000018422100fbffffff0000000000000000182a0000cd45940c6273c624719aa27bd10de690538d0744ae5a48", @ANYRES32=r0, @ANYBLOB="00000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000740)={0x5, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r6, 0x800455c9, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4000000) 5.741111542s ago: executing program 3 (id=80): socket$kcm(0x10, 0x3, 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500230085100000f8ffffff18250000", @ANYRES32, @ANYBLOB="0000000063f0d31f18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000951ce005fcf000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008520fffffcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703edff07000000b704000000000000850000008200000018422100fbffffff0000000000000000182a0000cd45940c6273c624719aa27bd10de690538d0744ae5a48", @ANYRES32=r0, @ANYBLOB="00000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000740)={0x5, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r6, 0x800455c9, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 931.290708ms ago: executing program 0 (id=81): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 593.17606ms ago: executing program 1 (id=82): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&\x00', 0x0, 0x0, 0xfd, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 0 (id=83): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) r1 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046}, &(0x7f0000002500), &(0x7f0000002540)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000000)='asymmetric\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0) (fail_nth: 8) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:54549' (ED25519) to the list of known hosts. [ 34.711727][ T5255] cgroup: Unknown subsys name 'net' [ 34.848402][ T5255] cgroup: Unknown subsys name 'cpuset' [ 34.851465][ T5255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.799358][ T5255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.704289][ T4776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.707753][ T4776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.710228][ T4776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.712544][ T4776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.714614][ T4776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.719998][ T5338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.724139][ T5344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.727340][ T5344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.729488][ T5344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.731771][ T5344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.733717][ T5344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.738059][ T5344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.741513][ T5344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.744679][ T5344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.748227][ T5344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.750763][ T5347] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.751862][ T5344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.753305][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.754950][ T5344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.772214][ T5347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.777893][ T5347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.785820][ T5338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.789064][ T5338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.791969][ T5338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.977453][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 39.029371][ T5341] chnl_net:caif_netlink_parms(): no params data found [ 39.050494][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 39.100041][ T5350] chnl_net:caif_netlink_parms(): no params data found [ 39.110184][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.112412][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.114439][ T5337] bridge_slave_0: entered allmulticast mode [ 39.116868][ T5337] bridge_slave_0: entered promiscuous mode [ 39.120225][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.122150][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.124045][ T5337] bridge_slave_1: entered allmulticast mode [ 39.126152][ T5337] bridge_slave_1: entered promiscuous mode [ 39.240038][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.242056][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.244172][ T5341] bridge_slave_0: entered allmulticast mode [ 39.247330][ T5341] bridge_slave_0: entered promiscuous mode [ 39.293620][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.296300][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.298274][ T5341] bridge_slave_1: entered allmulticast mode [ 39.300887][ T5341] bridge_slave_1: entered promiscuous mode [ 39.317919][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.378645][ T5341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.383373][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.406731][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.409000][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.410914][ T5342] bridge_slave_0: entered allmulticast mode [ 39.413104][ T5342] bridge_slave_0: entered promiscuous mode [ 39.417053][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.419064][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.420934][ T5350] bridge_slave_0: entered allmulticast mode [ 39.422943][ T5350] bridge_slave_0: entered promiscuous mode [ 39.426218][ T5341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.437453][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.439318][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.441188][ T5342] bridge_slave_1: entered allmulticast mode [ 39.443573][ T5342] bridge_slave_1: entered promiscuous mode [ 39.454778][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.456712][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.458649][ T5350] bridge_slave_1: entered allmulticast mode [ 39.460661][ T5350] bridge_slave_1: entered promiscuous mode [ 39.489738][ T5337] team0: Port device team_slave_0 added [ 39.518817][ T5341] team0: Port device team_slave_0 added [ 39.521361][ T5337] team0: Port device team_slave_1 added [ 39.533299][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.537331][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.540951][ T5341] team0: Port device team_slave_1 added [ 39.559328][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.562635][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.573928][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.576221][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.584386][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.643473][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.646450][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.654420][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.660641][ T5342] team0: Port device team_slave_0 added [ 39.665600][ T5350] team0: Port device team_slave_0 added [ 39.668067][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.669906][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.676834][ T5341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.685173][ T5342] team0: Port device team_slave_1 added [ 39.696423][ T5350] team0: Port device team_slave_1 added [ 39.698797][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.700841][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.709432][ T5341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.723219][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.725704][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.733408][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.774402][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.777513][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.786342][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.805090][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.808277][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.816584][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.820844][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.822890][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.831010][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.837488][ T5337] hsr_slave_0: entered promiscuous mode [ 39.840456][ T5337] hsr_slave_1: entered promiscuous mode [ 39.888227][ T5341] hsr_slave_0: entered promiscuous mode [ 39.891384][ T5341] hsr_slave_1: entered promiscuous mode [ 39.894084][ T5341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.897346][ T5341] Cannot create hsr debugfs directory [ 39.911348][ T5342] hsr_slave_0: entered promiscuous mode [ 39.913709][ T5342] hsr_slave_1: entered promiscuous mode [ 39.916227][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.918243][ T5342] Cannot create hsr debugfs directory [ 39.990395][ T5350] hsr_slave_0: entered promiscuous mode [ 39.993087][ T5350] hsr_slave_1: entered promiscuous mode [ 39.996361][ T5350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.999053][ T5350] Cannot create hsr debugfs directory [ 40.229865][ T5337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.238483][ T5337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.243756][ T5337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.249978][ T5337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.273990][ T5342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.287154][ T5342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.290528][ T5342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.298726][ T5342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.331030][ T5350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.340987][ T5350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.344543][ T5350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.349118][ T5350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.382251][ T5341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.386372][ T5341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.390669][ T5341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.400741][ T5341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.446687][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.480937][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.489252][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.492026][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.499871][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.511865][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.514495][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.531251][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.542946][ T5337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.547212][ T5337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.566488][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.576287][ T5341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.582841][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.589990][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.592350][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.600241][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.602706][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.607418][ T5341] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.618393][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.620277][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.623192][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.625345][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.643284][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.646275][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.650396][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.652648][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.684731][ T5350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.688148][ T5350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.716872][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.739540][ T5337] veth0_vlan: entered promiscuous mode [ 40.743885][ T5337] veth1_vlan: entered promiscuous mode [ 40.757901][ T5337] veth0_macvtap: entered promiscuous mode [ 40.760932][ T5337] veth1_macvtap: entered promiscuous mode [ 40.769484][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.774319][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.778340][ T5337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.780723][ T5337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.782954][ T5337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.785220][ T5337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.787059][ T5338] Bluetooth: hci0: command tx timeout [ 40.838776][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.840929][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.851385][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.855160][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.855457][ T5338] Bluetooth: hci3: command tx timeout [ 40.860508][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.862118][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.862565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.866004][ T5338] Bluetooth: hci1: command tx timeout [ 40.866088][ T5348] Bluetooth: hci2: command tx timeout [ 40.899284][ T5350] veth0_vlan: entered promiscuous mode [ 40.905160][ T5337] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.912485][ T5341] veth0_vlan: entered promiscuous mode [ 40.923524][ T5350] veth1_vlan: entered promiscuous mode [ 40.938084][ T5342] veth0_vlan: entered promiscuous mode [ 40.943825][ T5342] veth1_vlan: entered promiscuous mode [ 40.947745][ T5341] veth1_vlan: entered promiscuous mode [ 40.962741][ T5350] veth0_macvtap: entered promiscuous mode [ 40.982228][ T5350] veth1_macvtap: entered promiscuous mode [ 40.989193][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.992091][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.995740][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.000920][ T5341] veth0_macvtap: entered promiscuous mode [ 41.007293][ T5342] veth0_macvtap: entered promiscuous mode [ 41.012867][ T5341] veth1_macvtap: entered promiscuous mode [ 41.015228][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.018666][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.022235][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.025125][ T5342] veth1_macvtap: entered promiscuous mode [ 41.037124][ T5350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.039420][ T5350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.040336][ T5400] process 'syz.0.1' launched './file2' with NULL argv: empty string added [ 41.041633][ T5350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.048180][ T5350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.054660][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.057994][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.060534][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.063224][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.067199][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.075842][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.080400][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.085553][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.088847][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.093816][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.098176][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.102712][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.106885][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.110503][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.113926][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.118199][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.122553][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.136827][ T5342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.139196][ T5342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.141468][ T5342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.143740][ T5342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.156131][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.160442][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.163551][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.166584][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.169482][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.172218][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.176384][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.205694][ T5341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.210270][ T5341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.212712][ T5341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.214975][ T5341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.241722][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.241735][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.279289][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.279302][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.310139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.312453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.335811][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.338670][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.341541][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.345816][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.354981][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.357489][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.812018][ T5411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 41.814146][ T5411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 41.847459][ T5411] vhci_hcd vhci_hcd.0: Device attached [ 42.085457][ T70] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.125487][ T5382] usb 20-1: SetAddress Request (2) to port 0 [ 42.127945][ T5382] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 42.256493][ T70] usb 8-1: Using ep0 maxpacket: 8 [ 42.267455][ T70] usb 8-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 42.273988][ T70] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.279208][ T70] usb 8-1: Product: syz [ 42.280869][ T70] usb 8-1: Manufacturer: syz [ 42.282595][ T70] usb 8-1: SerialNumber: syz [ 42.317258][ T70] usb 8-1: config 0 descriptor?? [ 42.324921][ T70] cytherm 8-1:0.0: Cypress thermometer device now attached [ 42.505609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.527466][ T5420] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 42.530456][ T5377] usb 8-1: USB disconnect, device number 2 [ 42.532502][ T5377] cytherm 8-1:0.0: Cypress thermometer now disconnected [ 42.535637][ T45] vhci_hcd: stop threads [ 42.537107][ T45] vhci_hcd: release socket [ 42.543269][ T45] vhci_hcd: disconnect device [ 42.582230][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 42.584116][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 42.737448][ T5430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6'. [ 42.755512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.856654][ T5348] Bluetooth: hci0: command tx timeout [ 42.935671][ T5348] Bluetooth: hci2: command tx timeout [ 42.945498][ T5348] Bluetooth: hci1: command tx timeout [ 42.945655][ T4776] Bluetooth: hci3: command tx timeout [ 43.115641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.277182][ T39] audit: type=1326 audit(1728489684.144:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.282860][ T39] audit: type=1326 audit(1728489684.144:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.289597][ T39] audit: type=1326 audit(1728489684.144:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.295738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.296681][ T39] audit: type=1326 audit(1728489684.144:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.297889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.304438][ T39] audit: type=1326 audit(1728489684.144:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.313258][ T39] audit: type=1326 audit(1728489684.144:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.320454][ T39] audit: type=1326 audit(1728489684.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.325801][ T39] audit: type=1326 audit(1728489684.144:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.331520][ T39] audit: type=1326 audit(1728489684.174:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.338386][ T39] audit: type=1326 audit(1728489684.174:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.1.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 43.377110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.379346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.381528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.846937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.849149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 44.625469][ T5338] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 44.625609][ T4776] Bluetooth: hci4: command 0xfc11 tx timeout [ 44.935487][ T5338] Bluetooth: hci0: command tx timeout [ 45.017252][ T5338] Bluetooth: hci1: command tx timeout [ 45.017911][ T4776] Bluetooth: hci2: command tx timeout [ 45.025482][ T4776] Bluetooth: hci3: command tx timeout [ 46.393435][ T5459] tmpfs: Bad value for 'size' [ 47.016221][ T4776] Bluetooth: hci0: command tx timeout [ 47.095513][ T4776] Bluetooth: hci1: command tx timeout [ 47.095767][ T5338] Bluetooth: hci3: command tx timeout [ 47.097177][ T4776] Bluetooth: hci2: command tx timeout [ 47.176652][ T5382] usb 20-1: device descriptor read/8, error -110 [ 47.233578][ T5472] futex_wake_op: syz.3.17 tries to shift op by -1; fix this program [ 47.418420][ T5473] tmpfs: Bad value for 'mpol' [ 47.567408][ T5382] usb usb20-port1: attempt power cycle [ 48.150058][ T5382] usb usb20-port1: unable to enumerate USB device [ 48.649032][ T5483] input: syz1 as /devices/virtual/input/input5 [ 48.957409][ T5487] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 49.671900][ T5490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 49.673656][ T5490] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.676995][ T5490] vhci_hcd vhci_hcd.0: Device attached [ 49.681692][ T5490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 49.683285][ T5490] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.693956][ T5490] vhci_hcd vhci_hcd.0: Device attached [ 49.718667][ T5493] usbip_core: unknown command [ 49.720471][ T5493] vhci_hcd: unknown pdu 0 [ 49.722038][ T5493] usbip_core: unknown command [ 49.724218][ T1097] vhci_hcd: stop threads [ 49.725427][ T1097] vhci_hcd: release socket [ 49.726627][ T1097] vhci_hcd: disconnect device [ 49.739046][ T5491] vhci_hcd: connection closed [ 49.748903][ T1097] vhci_hcd: stop threads [ 49.751648][ T1097] vhci_hcd: release socket [ 49.753115][ T1097] vhci_hcd: disconnect device [ 50.712811][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 53.031532][ T5348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.035695][ T5348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.038266][ T5348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.042730][ T5348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.050707][ T5348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.053536][ T5348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.070302][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 53.072770][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 53.077272][ T4776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.084381][ T4776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.091188][ T4776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.094658][ T4776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.098577][ T4776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 53.101212][ T4776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 53.290914][ T5518] chnl_net:caif_netlink_parms(): no params data found [ 53.299136][ T5516] chnl_net:caif_netlink_parms(): no params data found [ 53.492191][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.494677][ T5518] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.502333][ T5518] bridge_slave_0: entered allmulticast mode [ 53.516384][ T5518] bridge_slave_0: entered promiscuous mode [ 53.520448][ T5518] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.523450][ T5518] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.526385][ T5518] bridge_slave_1: entered allmulticast mode [ 53.530325][ T5518] bridge_slave_1: entered promiscuous mode [ 53.681076][ T5518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.687055][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.695481][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.698091][ T5516] bridge_slave_0: entered allmulticast mode [ 53.701641][ T5516] bridge_slave_0: entered promiscuous mode [ 53.706613][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.709051][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.712560][ T5516] bridge_slave_1: entered allmulticast mode [ 53.718278][ T5516] bridge_slave_1: entered promiscuous mode [ 53.722769][ T5518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.800282][ T5518] team0: Port device team_slave_0 added [ 53.803814][ T5518] team0: Port device team_slave_1 added [ 53.849092][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.852825][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.993309][ T5518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.995829][ T5518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.002734][ T5518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.008999][ T5518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.012005][ T5518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.020376][ T5518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.026672][ T5516] team0: Port device team_slave_0 added [ 54.037421][ T5516] team0: Port device team_slave_1 added [ 54.272967][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.275225][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.285817][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.303425][ T5518] hsr_slave_0: entered promiscuous mode [ 54.306212][ T5518] hsr_slave_1: entered promiscuous mode [ 54.314991][ T5518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.317758][ T5518] Cannot create hsr debugfs directory [ 54.363449][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.370219][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.394800][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.496575][ T5516] hsr_slave_0: entered promiscuous mode [ 54.500500][ T5516] hsr_slave_1: entered promiscuous mode [ 54.504561][ T5516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.510380][ T5516] Cannot create hsr debugfs directory [ 54.632693][ T5518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.747362][ T5518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.817804][ T5518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.887527][ T5518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.991340][ T5516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.097249][ T5516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.105772][ T5348] Bluetooth: hci4: command tx timeout [ 55.165837][ T5516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.175492][ T5348] Bluetooth: hci5: command tx timeout [ 55.271543][ T5516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.389248][ T5544] syz.3.30 (5544) used greatest stack depth: 20880 bytes left [ 55.392282][ T5516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.399961][ T5516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.411138][ T5516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.415439][ T5516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.448263][ T5518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.466132][ T5518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.472821][ T5518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.480868][ T5518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.489093][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.502404][ T5516] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.513738][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.515631][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.528623][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.530519][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.622259][ T5518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.638895][ T5518] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.645742][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.647649][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.661076][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.663026][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.791703][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.848070][ T5516] veth0_vlan: entered promiscuous mode [ 55.868341][ T5516] veth1_vlan: entered promiscuous mode [ 55.882562][ T5518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.914006][ T5516] veth0_macvtap: entered promiscuous mode [ 55.923133][ T5518] veth0_vlan: entered promiscuous mode [ 55.928813][ T5518] veth1_vlan: entered promiscuous mode [ 55.945152][ T5516] veth1_macvtap: entered promiscuous mode [ 55.958639][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.961423][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.964001][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.966919][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.969506][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.972125][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.974569][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.977309][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.983090][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.996585][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.999305][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.001702][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.004422][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.015519][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.020172][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.023441][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.026452][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.030949][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.043855][ T5518] veth0_macvtap: entered promiscuous mode [ 56.050534][ T5516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.052819][ T5516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.055015][ T5516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.058441][ T5516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.064252][ T5518] veth1_macvtap: entered promiscuous mode [ 56.076813][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.079611][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.083027][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.088535][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.091091][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.093855][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.096654][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.099392][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.102480][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.105122][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.112509][ T5518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.130279][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.133405][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.137331][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.140090][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.142641][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.150518][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.154039][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.158176][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.161011][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.163611][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.169895][ T5518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.197182][ T5518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.200498][ T5518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.203061][ T5518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.214195][ T5518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.998082][ T5560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.005366][ T5560] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 57.033220][ T5560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.035713][ T5560] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 57.059789][ T5560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.061959][ T5560] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 57.077423][ T5560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.079057][ T5560] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 57.185053][ T5560] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 57.194087][ T5348] Bluetooth: hci4: command tx timeout [ 57.195704][ T5560] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 57.202913][ T5560] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 57.204482][ T5560] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 57.250425][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.252576][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.261296][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.263439][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.289190][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.292280][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.309512][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.312601][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.458182][ T5605] syz.0.27: attempt to access beyond end of device [ 57.458182][ T5605] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 57.466489][ T5605] EXT4-fs (loop0): unable to read superblock [ 57.477266][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 57.861660][ T5617] hub 2-0:1.0: USB hub found [ 57.880798][ T5617] hub 2-0:1.0: 2 ports detected [ 58.393990][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 58.650059][ T77] Bluetooth: hci6: Frame reassembly failed (-84) [ 59.764803][ T5654] FAULT_INJECTION: forcing a failure. [ 59.764803][ T5654] name failslab, interval 1, probability 0, space 0, times 1 [ 59.771678][ T5654] CPU: 1 UID: 0 PID: 5654 Comm: syz.1.41 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 59.774407][ T5654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.777210][ T5654] Call Trace: [ 59.778137][ T5654] [ 59.778905][ T5654] dump_stack_lvl+0x16c/0x1f0 [ 59.780148][ T5654] should_fail_ex+0x497/0x5b0 [ 59.781389][ T5654] ? fs_reclaim_acquire+0xae/0x160 [ 59.782698][ T5654] should_failslab+0xc2/0x120 [ 59.783912][ T5654] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 59.785296][ T5654] ? vm_area_alloc+0x1f/0x1c0 [ 59.786545][ T5654] vm_area_alloc+0x1f/0x1c0 [ 59.787744][ T5654] alloc_bprm+0x3d5/0xc50 [ 59.788862][ T5654] ? strncpy_from_user+0x1dd/0x2a0 [ 59.790194][ T5654] do_execveat_common.isra.0+0x1cd/0x630 [ 59.791644][ T5654] __ia32_compat_sys_execve+0x90/0xc0 [ 59.793070][ T5654] __do_fast_syscall_32+0x73/0x120 [ 59.794373][ T5654] do_fast_syscall_32+0x32/0x80 [ 59.795603][ T5654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.797214][ T5654] RIP: 0023:0xf7fa4579 [ 59.798288][ T5654] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 59.803198][ T5654] RSP: 002b:00000000f572656c EFLAGS: 00000296 ORIG_RAX: 000000000000000b [ 59.805273][ T5654] RAX: ffffffffffffffda RBX: 0000000020000300 RCX: 00000000200032c0 [ 59.807300][ T5654] RDX: 0000000020001100 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.809324][ T5654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.811328][ T5654] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 59.813316][ T5654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.815312][ T5654] [ 59.816155][ C1] vkms_vblank_simulate: vblank timer overrun [ 59.883925][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 59.959516][ T5658] syz.1.44 (5658): drop_caches: 2 [ 60.049190][ T5658] syz.1.44 (5658): drop_caches: 2 [ 60.698082][ T5348] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 62.695791][ T5691] usb usb9: usbfs: process 5691 (syz.1.50) did not claim interface 10 before use [ 62.747019][ T5691] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.684448][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 63.684459][ T39] audit: type=1326 audit(1728489704.544:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.1.54" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 65.819913][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 68.671498][ T5348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.674737][ T5348] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.678165][ T5348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.681730][ T5348] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.684906][ T5348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.687536][ T5348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.828347][ T5733] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 68.861474][ T5733] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 68.876239][ T5733] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 68.888391][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 68.895078][ T5733] bridge_slave_1: left allmulticast mode [ 68.902828][ T5733] bridge_slave_1: left promiscuous mode [ 68.908013][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.929946][ T5733] bridge_slave_0: left allmulticast mode [ 68.931495][ T5733] bridge_slave_0: left promiscuous mode [ 68.933029][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.060228][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 69.203059][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.208908][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.212037][ T5730] bridge_slave_0: entered allmulticast mode [ 69.218276][ T5730] bridge_slave_0: entered promiscuous mode [ 69.224933][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.233129][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.240789][ T5730] bridge_slave_1: entered allmulticast mode [ 69.248007][ T5730] bridge_slave_1: entered promiscuous mode [ 69.386281][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.390858][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.449945][ T5730] team0: Port device team_slave_0 added [ 69.452974][ T5730] team0: Port device team_slave_1 added [ 69.499699][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.502826][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.512511][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.518002][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.519857][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.528796][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.600304][ T5730] hsr_slave_0: entered promiscuous mode [ 69.608596][ T5730] hsr_slave_1: entered promiscuous mode [ 69.612619][ T5730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.614582][ T5730] Cannot create hsr debugfs directory [ 69.737392][ T5730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.813435][ T5730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.904774][ T5730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.013169][ T5730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.152146][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.159823][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 70.170817][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.197987][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.203160][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.252287][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.275187][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.284988][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.286947][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.294820][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.296667][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.344293][ T5730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.348725][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.402819][ T5763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.65'. [ 70.442356][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.487233][ T5730] veth0_vlan: entered promiscuous mode [ 70.499633][ T5730] veth1_vlan: entered promiscuous mode [ 70.521175][ T5730] veth0_macvtap: entered promiscuous mode [ 70.570048][ T5730] veth1_macvtap: entered promiscuous mode [ 70.622824][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.629384][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.632211][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.636328][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.639507][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.642762][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.646260][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.648986][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.651579][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.658567][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.662133][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.666080][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.670091][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.674707][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.679118][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.681780][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.684756][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.688115][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.691440][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.695215][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.695669][ T4776] Bluetooth: hci6: command tx timeout [ 70.700634][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.704090][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.707400][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.709937][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.712666][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.728548][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.745031][ T5730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.749229][ T5730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.752758][ T5730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.757816][ T5730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.883956][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.886334][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.917772][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.924674][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.938858][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.941477][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.124553][ T11] Bluetooth: hci7: Frame reassembly failed (-84) [ 71.265467][ T1995] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.429836][ T1995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.436830][ T1995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.444804][ T1995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.452165][ T1995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.456019][ T1995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.462943][ T1995] usb 7-1: config 0 descriptor?? [ 71.883147][ T1995] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 71.887026][ T1995] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 71.904396][ T1995] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.206485][ T5780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.60'. [ 72.261892][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.267645][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.785957][ T5338] Bluetooth: hci6: command 0x041b tx timeout [ 73.100609][ T1995] usb 7-1: USB disconnect, device number 2 [ 73.175505][ T5348] Bluetooth: hci7: command 0xfc11 tx timeout [ 73.175530][ T4776] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 74.855440][ T4776] Bluetooth: hci6: command 0x041b tx timeout [ 76.086493][ T980] cfg80211: failed to load regulatory.db [ 76.229499][ T5814] fuse: Bad value for 'group_id' [ 76.230878][ T5814] fuse: Bad value for 'group_id' [ 76.935596][ T4776] Bluetooth: hci6: command 0x041b tx timeout [ 77.400540][ T11] Bluetooth: hci7: Frame reassembly failed (-84) [ 77.920841][ T58] Bluetooth: hci8: Frame reassembly failed (-84) [ 79.025753][ T5338] Bluetooth: hci6: command 0x041b tx timeout [ 79.415493][ T4776] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 79.415519][ T5338] Bluetooth: hci7: command 0xfc11 tx timeout [ 79.975457][ T5348] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 80.690076][ T4776] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.692661][ T4776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.694981][ T4776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.698127][ T4776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.700108][ T4776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 80.702028][ T4776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.778918][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.865430][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.869620][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.873078][ T5833] bridge_slave_0: entered allmulticast mode [ 80.876763][ T5833] bridge_slave_0: entered promiscuous mode [ 80.886372][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.888655][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.891049][ T5833] bridge_slave_1: entered allmulticast mode [ 80.893764][ T5833] bridge_slave_1: entered promiscuous mode [ 80.934626][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.943887][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.980640][ T5833] team0: Port device team_slave_0 added [ 80.983496][ T5833] team0: Port device team_slave_1 added [ 81.001487][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.003316][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.011442][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.015213][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.017489][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.023954][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.072931][ T5833] hsr_slave_0: entered promiscuous mode [ 81.090740][ T5833] hsr_slave_1: entered promiscuous mode [ 81.092964][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.094997][ T5833] Cannot create hsr debugfs directory [ 81.191930][ T5833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.211769][ T4776] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 81.217087][ T4776] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 81.220167][ T4776] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 81.224090][ T4776] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 81.226901][ T4776] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 81.228906][ T4776] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 81.271403][ T5833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.365001][ T5833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.372268][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 81.454099][ T5833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.484009][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.487090][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.489754][ T5842] bridge_slave_0: entered allmulticast mode [ 81.492533][ T5842] bridge_slave_0: entered promiscuous mode [ 81.497844][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.500240][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.502699][ T5842] bridge_slave_1: entered allmulticast mode [ 81.505614][ T5842] bridge_slave_1: entered promiscuous mode [ 81.540316][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.547470][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.583447][ T5842] team0: Port device team_slave_0 added [ 81.590794][ T5842] team0: Port device team_slave_1 added [ 81.625257][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.628742][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.635511][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.642958][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.648164][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.653134][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.655014][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.662308][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.672783][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.682530][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.749446][ T5842] hsr_slave_0: entered promiscuous mode [ 81.751580][ T5842] hsr_slave_1: entered promiscuous mode [ 81.753466][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.755983][ T5842] Cannot create hsr debugfs directory [ 81.776241][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.779005][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.781780][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.784304][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.829095][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.834249][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.927621][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.939737][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.956240][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.961714][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.964190][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.993349][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.012214][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.014108][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.080988][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.169386][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.180237][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.241217][ T5833] veth0_vlan: entered promiscuous mode [ 82.257139][ T5833] veth1_vlan: entered promiscuous mode [ 82.299359][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.310714][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.314956][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.323630][ T5833] veth0_macvtap: entered promiscuous mode [ 82.325763][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.330229][ T5833] veth1_macvtap: entered promiscuous mode [ 82.347504][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.351115][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.354389][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.358193][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.360725][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.363382][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.369988][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.372678][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.375201][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.378042][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.380551][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.383214][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.386244][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.389435][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.393260][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.401191][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.404703][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.408719][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.412169][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.415793][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.418591][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.421078][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424105][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.429059][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.432771][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.436660][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.440336][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.443570][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.447730][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.451340][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.456428][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.460125][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.463022][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.465566][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.525206][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.539843][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.543607][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.554267][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.564335][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.566906][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.569246][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.571469][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.579208][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.581703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.700993][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.723217][ T5842] veth0_vlan: entered promiscuous mode [ 82.729491][ T5842] veth1_vlan: entered promiscuous mode [ 82.743278][ T5842] veth0_macvtap: entered promiscuous mode [ 82.746842][ T5842] veth1_macvtap: entered promiscuous mode [ 82.753341][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.757123][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.759713][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.762506][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.765039][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.768107][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.770640][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.773398][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.776973][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.778180][ T4776] Bluetooth: hci7: command tx timeout [ 82.779706][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.779741][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.779749][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.779762][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.792380][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.796711][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.799820][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.804704][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.811705][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.814435][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.819041][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.823398][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.826640][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.829985][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.832958][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.836319][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.839391][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.842519][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.845509][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.848763][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.851768][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.854516][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.857535][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.860263][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.864522][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.872196][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.874507][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.878580][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.880841][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.912698][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.914832][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.928918][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.931148][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.256943][ T4776] Bluetooth: hci8: command tx timeout [ 83.845680][ T57] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.025381][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 84.032612][ T57] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 84.035017][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.048458][ T57] usb 5-1: Product: syz [ 84.050149][ T57] usb 5-1: Manufacturer: syz [ 84.051896][ T57] usb 5-1: SerialNumber: syz [ 84.054358][ T57] usb 5-1: config 0 descriptor?? [ 84.064920][ T57] as10x_usb: device has been detected [ 84.067478][ T57] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 84.080575][ T57] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 84.099266][ T57] as10x_usb: error during firmware upload part1 [ 84.101091][ T57] Registered device Sky IT Digital Key (green led) [ 84.272651][ T5869] random: crng reseeded on system resumption [ 84.316629][ T5869] FAULT_INJECTION: forcing a failure. [ 84.316629][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 84.323526][ T5869] CPU: 2 UID: 0 PID: 5869 Comm: syz.0.83 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 84.327306][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.331119][ T5869] Call Trace: [ 84.332342][ T5869] [ 84.333432][ T5869] dump_stack_lvl+0x16c/0x1f0 [ 84.335131][ T5869] should_fail_ex+0x497/0x5b0 [ 84.336790][ T5869] should_failslab+0xc2/0x120 [ 84.338545][ T5869] __kmalloc_cache_noprof+0x6b/0x310 [ 84.340424][ T5869] ? async_schedule_node_domain+0x54/0x120 [ 84.342561][ T5869] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 84.344812][ T5869] async_schedule_node_domain+0x54/0x120 [ 84.346845][ T5869] dev_cache_fw_image+0x38f/0x490 [ 84.348681][ T5869] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 84.350702][ T5869] ? dev_cache_fw_image+0x399/0x490 [ 84.352502][ T5869] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 84.354390][ T5869] dpm_for_each_dev+0x5a/0xb0 [ 84.356060][ T5869] fw_pm_notify+0x81/0x150 [ 84.357729][ T5869] notifier_call_chain+0xb9/0x410 [ 84.359562][ T5869] ? __pfx_fw_pm_notify+0x10/0x10 [ 84.361369][ T5869] blocking_notifier_call_chain_robust+0xc9/0x170 [ 84.363471][ T5869] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 84.365665][ T5869] pm_notifier_call_chain_robust+0x27/0x60 [ 84.367166][ T5869] snapshot_open+0x218/0x2b0 [ 84.368362][ T5869] ? __pfx_snapshot_open+0x10/0x10 [ 84.369694][ T5869] misc_open+0x35a/0x420 [ 84.371049][ T5869] ? __pfx_misc_open+0x10/0x10 [ 84.372682][ T5869] chrdev_open+0x237/0x6a0 [ 84.374220][ T5869] ? __pfx_chrdev_open+0x10/0x10 [ 84.375935][ T5869] ? security_file_open+0x62a/0x9d0 [ 84.377771][ T5869] do_dentry_open+0x6ca/0x1530 [ 84.379401][ T5869] ? __pfx_chrdev_open+0x10/0x10 [ 84.381083][ T5869] ? inode_permission+0xdd/0x5f0 [ 84.382799][ T5869] vfs_open+0x82/0x3f0 [ 84.384250][ T5869] ? may_open+0x1f2/0x400 [ 84.385760][ T5869] path_openat+0x1e6a/0x2d60 [ 84.387342][ T5869] ? __pfx_path_openat+0x10/0x10 [ 84.388858][ T5869] ? __pfx___lock_acquire+0x10/0x10 [ 84.390236][ T5869] do_filp_open+0x1dc/0x430 [ 84.391446][ T5869] ? __pfx_do_filp_open+0x10/0x10 [ 84.393157][ T5869] ? find_held_lock+0x2d/0x110 [ 84.394829][ T5869] ? _raw_spin_unlock+0x28/0x50 [ 84.396584][ T5869] ? alloc_fd+0x2d7/0x6c0 [ 84.398088][ T5869] do_sys_openat2+0x17a/0x1e0 [ 84.399707][ T5869] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.401431][ T5869] ? __fget_files+0x244/0x3f0 [ 84.402813][ T5869] __ia32_compat_sys_openat+0x16e/0x210 [ 84.404579][ T5869] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 84.406753][ T5869] ? ksys_write+0x1ad/0x260 [ 84.408410][ T5869] __do_fast_syscall_32+0x73/0x120 [ 84.410279][ T5869] do_fast_syscall_32+0x32/0x80 [ 84.411873][ T5869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.413917][ T5869] RIP: 0023:0xf744e579 [ 84.415329][ T5869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.421965][ T5869] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 84.424789][ T5869] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000200 [ 84.427602][ T5869] RDX: 0000000000080001 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.430443][ T5869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.433128][ T5869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.435826][ T5869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.438643][ T5869] [ 84.488222][ T5869] [ 84.488915][ T5869] ============================================ [ 84.490532][ T5869] WARNING: possible recursive locking detected [ 84.492121][ T5869] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted [ 84.494867][ T5869] -------------------------------------------- [ 84.497463][ T5869] syz.0.83/5869 is trying to acquire lock: [ 84.499032][ T5869] ffffffff8eca09e8 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x4e/0x600 [ 84.501108][ T5869] [ 84.501108][ T5869] but task is already holding lock: [ 84.503037][ T5869] ffffffff8eca09e8 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x69/0x150 [ 84.505162][ T5869] [ 84.505162][ T5869] other info that might help us debug this: [ 84.507248][ T5869] Possible unsafe locking scenario: [ 84.507248][ T5869] [ 84.509182][ T5869] CPU0 [ 84.510071][ T5869] ---- [ 84.510950][ T5869] lock(fw_lock); [ 84.511946][ T5869] lock(fw_lock); [ 84.512941][ T5869] [ 84.512941][ T5869] *** DEADLOCK *** [ 84.512941][ T5869] [ 84.515053][ T5869] May be due to missing lock nesting notation [ 84.515053][ T5869] [ 84.517188][ T5869] 5 locks held by syz.0.83/5869: [ 84.518509][ T5869] #0: ffffffff8ea9b4a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x63/0x420 [ 84.520704][ T5869] #1: ffffffff8dc7d7c8 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x87/0xa0 [ 84.523423][ T5869] #2: ffffffff8dcbb590 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0xa9/0x170 [ 84.526498][ T5869] #3: ffffffff8eca09e8 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x69/0x150 [ 84.528753][ T5869] #4: ffffffff8ec9b568 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x2d/0xb0 [ 84.531183][ T5869] [ 84.531183][ T5869] stack backtrace: [ 84.532728][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz.0.83 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 84.535448][ T5869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.538402][ T5869] Call Trace: [ 84.539286][ T5869] [ 84.540153][ T5869] dump_stack_lvl+0x116/0x1f0 [ 84.541406][ T5869] print_deadlock_bug+0x2e3/0x410 [ 84.542748][ T5869] __lock_acquire+0x2185/0x3ce0 [ 84.544036][ T5869] ? __pfx___lock_acquire+0x10/0x10 [ 84.545413][ T5869] lock_acquire.part.0+0x11b/0x380 [ 84.546779][ T5869] ? assign_fw+0x4e/0x600 [ 84.547927][ T5869] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.549402][ T5869] ? rcu_is_watching+0x12/0xc0 [ 84.550677][ T5869] ? trace_lock_acquire+0x14a/0x1d0 [ 84.552047][ T5869] ? assign_fw+0x4e/0x600 [ 84.553191][ T5869] ? lock_acquire+0x2f/0xb0 [ 84.554407][ T5869] ? assign_fw+0x4e/0x600 [ 84.555530][ T5869] __mutex_lock+0x175/0x9c0 [ 84.556728][ T5869] ? assign_fw+0x4e/0x600 [ 84.557904][ T5869] ? assign_fw+0x4e/0x600 [ 84.559047][ T5869] ? __pfx___mutex_lock+0x10/0x10 [ 84.560380][ T5869] ? kasan_quarantine_put+0x10a/0x240 [ 84.561801][ T5869] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.563176][ T5869] ? assign_fw+0x4e/0x600 [ 84.564336][ T5869] ? _request_firmware+0x906/0x13d0 [ 84.565845][ T5869] assign_fw+0x4e/0x600 [ 84.567114][ T5869] _request_firmware+0x937/0x13d0 [ 84.568453][ T5869] ? __pfx__request_firmware+0x10/0x10 [ 84.569902][ T5869] ? irqentry_exit+0x3b/0x90 [ 84.571123][ T5869] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.572490][ T5869] __async_dev_cache_fw_image+0xb2/0x340 [ 84.574031][ T5869] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 84.576094][ T5869] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 84.578069][ T5869] async_schedule_node_domain+0xd1/0x120 [ 84.579898][ T5869] dev_cache_fw_image+0x38f/0x490 [ 84.581424][ T5869] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 84.583275][ T5869] ? dev_cache_fw_image+0x399/0x490 [ 84.585026][ T5869] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 84.586517][ T5869] dpm_for_each_dev+0x5a/0xb0 [ 84.587761][ T5869] fw_pm_notify+0x81/0x150 [ 84.588969][ T5869] notifier_call_chain+0xb9/0x410 [ 84.590405][ T5869] ? __pfx_fw_pm_notify+0x10/0x10 [ 84.592004][ T5869] blocking_notifier_call_chain_robust+0xc9/0x170 [ 84.593771][ T5869] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 84.595588][ T5869] pm_notifier_call_chain_robust+0x27/0x60 [ 84.597119][ T5869] snapshot_open+0x218/0x2b0 [ 84.598374][ T5869] ? __pfx_snapshot_open+0x10/0x10 [ 84.599733][ T5869] misc_open+0x35a/0x420 [ 84.600883][ T5869] ? __pfx_misc_open+0x10/0x10 [ 84.602152][ T5869] chrdev_open+0x237/0x6a0 [ 84.603321][ T5869] ? __pfx_chrdev_open+0x10/0x10 [ 84.604616][ T5869] ? security_file_open+0x62a/0x9d0 [ 84.606004][ T5869] do_dentry_open+0x6ca/0x1530 [ 84.607268][ T5869] ? __pfx_chrdev_open+0x10/0x10 [ 84.608624][ T5869] ? inode_permission+0xdd/0x5f0 [ 84.609955][ T5869] vfs_open+0x82/0x3f0 [ 84.611029][ T5869] ? may_open+0x1f2/0x400 [ 84.612165][ T5869] path_openat+0x1e6a/0x2d60 [ 84.613376][ T5869] ? __pfx_path_openat+0x10/0x10 [ 84.614676][ T5869] ? __pfx___lock_acquire+0x10/0x10 [ 84.616044][ T5869] do_filp_open+0x1dc/0x430 [ 84.617238][ T5869] ? __pfx_do_filp_open+0x10/0x10 [ 84.618572][ T5869] ? find_held_lock+0x2d/0x110 [ 84.619831][ T5869] ? _raw_spin_unlock+0x28/0x50 [ 84.621116][ T5869] ? alloc_fd+0x2d7/0x6c0 [ 84.622258][ T5869] do_sys_openat2+0x17a/0x1e0 [ 84.623503][ T5869] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.624869][ T5869] ? __fget_files+0x244/0x3f0 [ 84.626119][ T5869] __ia32_compat_sys_openat+0x16e/0x210 [ 84.627576][ T5869] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 84.629168][ T5869] ? ksys_write+0x1ad/0x260 [ 84.630372][ T5869] __do_fast_syscall_32+0x73/0x120 [ 84.631716][ T5869] do_fast_syscall_32+0x32/0x80 [ 84.633001][ T5869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.634681][ T5869] RIP: 0023:0xf744e579 [ 84.635764][ T5869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.640784][ T5869] RSP: 002b:00000000f573656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 84.642966][ T5869] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000200 [ 84.645026][ T5869] RDX: 0000000000080001 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.647094][ T5869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.649159][ T5869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 84.651217][ T5869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.653272][ T5869] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.865358][ T4776] Bluetooth: hci7: command tx timeout [ 85.345390][ T4776] Bluetooth: hci8: command tx timeout [ 86.935784][ T4776] Bluetooth: hci7: command tx timeout [ 87.415915][ T4776] Bluetooth: hci8: command tx timeout [ 89.015410][ T4776] Bluetooth: hci7: command tx timeout [ 89.495986][ T4776] Bluetooth: hci8: command tx timeout VM DIAGNOSIS: 16:02:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000217ed4 RBX=0000000000000000 RCX=ffffffff8b131a39 RDX=ffffed1005687026 RSI=ffffffff8bb12360 RDI=ffffffff816418fc RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000003 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cd248 R15=0000000000000000 RIP=ffffffff8b132e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bf6b310600 CR3=00000000711cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306270616c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2e109130 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ff00000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ff00000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5548474900000004 0000003900000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5548474953004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 306e6170776f6c2f 74656e2f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850374c5 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc90021e06c10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000074 R14=ffffffff85037460 R15=0000000000000000 RIP=ffffffff850374ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bf6b310600 CR3=00000000711cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=0000000000003fff Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000c00000028 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000e00000001 0000000000000006 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0043004400010015 0000000000000040 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000911 0000000000000000 306572673670692f 74656e2f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=00000000000eaf6c RBX=0000000000000002 RCX=ffffffff8b131a39 RDX=ffffed10056c7026 RSI=ffffffff8bb12360 RDI=ffffffff816418fc RBP=ffffed10036ee000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000001 R12=0000000000000002 R13=ffff88801b770000 R14=ffffffff901cd248 R15=0000000000000000 RIP=ffffffff8b132e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ed08516c0 CR3=00000000711cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff816947be RDX=fffffbfff2039a4a RSI=ffffffff8bb12360 RDI=ffffffff8bb123a0 RBP=0000000000000000 RSP=ffffc90000eaf6e0 R8 =0000000000000000 R9 =fffffbfff2039a49 R10=ffffffff901cd24f R11=1ffffffff1bb8549 R12=0000000000000000 R13=0000000000000002 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b1321c8 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ed0929bd0 CR3=00000000711cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000