last executing test programs: 9.381044826s ago: executing program 2 (id=424): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500), 0x4) r3 = socket$packet(0x11, 0x0, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(0x0, r4) io_uring_setup(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x398, 0x0, r0}) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x9, 'vlan0\x00'}) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00'}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0xa00400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3, 0x5}}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000030c0)={0xf, {"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", 0x1000}}, 0x1006) 9.276866016s ago: executing program 2 (id=425): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x20082, 0x0) write$sequencer(r0, &(0x7f00000003c0)=ANY=[], 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, 0x0, &(0x7f0000001180)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20009015) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.249333666s ago: executing program 1 (id=429): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r1, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x474c82) socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x900, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) 7.017657816s ago: executing program 1 (id=431): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x108, 0xe, 0x0, &(0x7f00000002c0)="826ff2a38932974ab361c2e5273b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x4c) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x0, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r8, 0x40047454, &(0x7f0000000300)) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/20}, {&(0x7f0000000540)=""/63}, {&(0x7f0000000580)=""/86}, {&(0x7f0000000680)=""/126}]}, 0x6}], 0x6a1, 0x20, 0x0) 6.40685259s ago: executing program 1 (id=435): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/46, 0x2e}], 0x1}, 0x5}], 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) readv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/187, 0xbb}, {0x0}], 0x2) 3.519682652s ago: executing program 2 (id=436): gettid() epoll_create1(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0xa041) listen(0xffffffffffffffff, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r3 = io_uring_setup(0x4d63, &(0x7f0000000000)={0x0, 0x80000000, 0x0, 0x2, 0xf5}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) 3.519169708s ago: executing program 0 (id=438): r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000008000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff01000000bfa100000000000007010000f8ffffffb702000008400000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x97b2, @void, @value}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) 3.518642533s ago: executing program 3 (id=439): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110020", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x1000, &(0x7f0000000940)=""/4096, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x5, 0x48000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x4, 0x8, 0xb}], 0x10, 0xf700, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0f61c423f37a3ddd5cd7d4e32238994f61a0eeef8e83fc27bb2c922cb67f1f70e448673c3368303ff7d64d9806adda52a065d69e03ef309c3aaf9ca03195a061ed3037447f6c428e249e4bcd2df2e8b00a1b34c876c048b3a869579a1d9cfb63b1258682ba5c980fb388a5990f448c400982f0888531562a10c6c1d5e82b3ea8b457d4c7dab883a2cb8a016374818fa90637c48875c793c6862b9088351086638f055a3d1df802c52eef600914b568ddb7e43b2f2c1e19b7db207466d5f6b1f9a4818b1c9979b5b2c72dd8878ddd73353e0d34307cd9a18b34dc3270c05ccfeecd2a55f665c9ceb9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0xa, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, 0x0, 0x0, 0x80fe) syz_emit_ethernet(0x0, 0x0, 0x0) clock_getres(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 3.323180834s ago: executing program 1 (id=440): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xfc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x3, 0x0, 0x1, 0x1}}, {{0x4}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4}}], 0x28) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_adjtime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000000)=0x641, 0x4) 2.915903157s ago: executing program 3 (id=441): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @void, @value, @void, @value}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x4, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1806000000000000000000000000000018240000", @ANYRES32=r1, @ANYBLOB="00000000ff070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000e400d96cb423009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000080000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$dri(&(0x7f00000001c0), 0x7fffffff, 0x48400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0xf, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, &(0x7f00000000c0)=0xfffffff7) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e06000e080000007dbfc1c4260bf5ef346a70ad32cccdaf84bd441fe2b4bcb141734c01c214a55574e7c2d76553da31f712aefe9e37043fca9981b1269103c14260cf4564918a5b03dab3dd2a766ff0d5d5f7976ab62f8f57d780aed71ddaa4c1c5071295ba39f4b28d8b568c6ca63680d3af6c8afdaf1f76a12ad9cd6100c591bc8956da80a98d9d973c8c711449caa12e525146c974a94592ac6ae5130d3c068343a88c75832f241aec8605842d94f19cd86389bb4f5fcfde795e1b4546245494b109f2d4654666fb98a185396984f1cc77675fa4318012147cdffb416fa386a6d010f37e7fb3332907b4f3f161bf2abd898112867491601ee7fceda2d5178edf82626b89661be9aa489bd5a3d2ecb4567cb8d5a14fd92eca433475ecab7a5931adb4be0022964b8310f1fe307c86c64735e6a41b7d2b982d28bdca2f9bdc7252d2bdbf940f833deb7f2f44fc2715038ff6273a35ffca8cf2d4045d05fbfd30fca0616d042b272a28abd57ecf885205fcd13aa4aaeb3b5112a11230"], 0x9) 2.859370042s ago: executing program 0 (id=442): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000005840), &(0x7f0000005880)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x18, r5, 0x707, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000180)=0x3) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000080)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000bd7000fddbdf2502000000030900000000000000000000ce2fffba59fae3389efdddd962208b9d0dcc6ffcb1a8c248367d682ed577d45fa770aef4ce322453a2a7cf78a97262be928bef16d3a953bccd104d1b81a73eaba3d81c636a119ee99f54498a775b8f8e6c015286b0883b29d85f141e43a3d1c7867eeeec2b7290ee078fe03a7bcb05"], 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 2.640813095s ago: executing program 0 (id=443): socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/rt_cache\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, &(0x7f0000000000)) 2.370098559s ago: executing program 1 (id=444): setns(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x100300) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7f, 0xfd}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.369773634s ago: executing program 2 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = getpid() r3 = dup2(r1, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000100181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2437de650b994048af047bef09bb99585d4aa5cf744d976ab18496db9f4f50d27d859a136bfec7f9db18e78ec6a37c42c16056465b42e49361f2ea5997fd8d2051ee105db2493c0089507d3809408aec6dba5e04cb6cdfe34504a3167468463b0a782bc7c8a56f9ea2c072"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) 2.140184076s ago: executing program 0 (id=446): r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = accept4$inet(r0, 0x0, &(0x7f00000005c0), 0x800) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000640)={0x0, 0x0}, 0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x3c0, 0x0, 0x0, 0x2b0, 0x1a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@empty, @local, 0x0, 0x0, 'batadv0\x00', 'netdevsim0\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @TTL={0x24}}, {{@uncond, 0x0, 0x9c, 0xd8, 0x0, {}, [@common=@ah={{0x2c}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @ECN={0x24}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') writev(r4, &(0x7f00000010c0)=[{0x0}], 0x1) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x2d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b4, 0x3b4, 0x3b4, 0xffffffff, 0x4, &(0x7f0000000680), {[{{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0xc, 0x9, 0x1, 0x2, 0x6, @mcast1, @empty, @private2, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0x0, 0xff0000ff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 0x240, 0x40}}]}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@srh1={{0x8c}, {0x87, 0xff, 0xe, 0xfe, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0x0, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], 0x800, 0x2449}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3}, {0x4, 0x3, 0x3}}}}, {{@ipv6={@loopback, @local, [0x0, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'bridge_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x5e, 0x97, 0x3, 0x10}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x101, 0x5, 0x9, 0x3, 0xd, 0x4, 0x4, 0xe16]}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) 1.860047772s ago: executing program 3 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd7}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x2, 0x3, 0x1, 0x8}], 0x10, 0x35d, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffffffffffe8f, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0xaa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r1, 0x0, r2, 0x0, 0x114, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x14200) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f00000007c0), 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x8000001, 0x115042) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000088c0)={0x0, &(0x7f00000087c0)=[{}], r4, 0x0, '\x00', 0x0, 0x1}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtaction={0xbc, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r10}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r11, 0x641f) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) 1.800298479s ago: executing program 3 (id=448): socket$packet(0x11, 0x3, 0x300) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket(0x28, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x950, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.73013337s ago: executing program 3 (id=449): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) userfaultfd(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000), 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00002a2000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0x6866, 0x0, &(0x7f0000000080), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 622.129099ms ago: executing program 2 (id=450): r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) 340.043655ms ago: executing program 0 (id=451): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x9, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6}]) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4441155c}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008880}, 0x84) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x6, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)='user_linkup_enabled\x00', &(0x7f0000000240)='team\x00', &(0x7f0000000280)='team\x00'], 0x0, 0x8}}, 0x40) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000009c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4c0}, 0x4000880) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x47c, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x87, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x7, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0xfffffdde}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{}, {}, {}, {}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x47c}}, 0x0) io_cancel(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x2, 0x8, r4, &(0x7f0000000cc0)="14e133d901302d48a255e24d", 0xc, 0x5, 0x0, 0x2}, &(0x7f0000000d40)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x8c, 0x0, 0xd02, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x10, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340), 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_MAX_P={0x4, 0x6}]}}]}, 0x178}}, 0x0) 91.438992ms ago: executing program 3 (id=452): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002380)=""/102389, 0x18ff5}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0), 0x10) r6 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DVD_AUTH(r6, 0x5390, &(0x7f00000000c0)=@lsk={0x0, 0x0, "dd86b2d709"}) keyctl$link(0x8, r4, 0x0) r7 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) fchdir(r5) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r8, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$BLKTRACESETUP(r9, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x8000000000000004}) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) 61.916148ms ago: executing program 1 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/locks\x00', 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000300)=""/246, 0xf6, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000000}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xc0292d665e02768d}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) setsockopt$rose(r7, 0x104, 0x4, &(0x7f0000000040)=0x1000000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7911af6743fa273757dd451400000000fddbdf250a0000000000000000000047e126635edb267de8cd630a5d3cb6a76ac693e3c9e0ef13"], 0x14}, 0x1, 0x0, 0x0, 0x2004c001}, 0x24040001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x410802) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r8, 0x4004af77, &(0x7f0000000000)=0x33) 50.826977ms ago: executing program 0 (id=454): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003f00)='ns/net\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000dc0)=""/143, 0x8f}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000001640)=""/4080, 0xff0}], 0x5}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x227a, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0xfe63) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x13) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000040)=0xde, 0x4) connect(r6, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80) open$dir(&(0x7f0000000000)='./file0\x00', 0xc0280, 0x0) dup3(r7, r0, 0x0) 0s ago: executing program 2 (id=455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r5 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14435' (ED25519) to the list of known hosts. [ 34.111975][ T5266] cgroup: Unknown subsys name 'net' [ 34.224013][ T5266] cgroup: Unknown subsys name 'cpuset' [ 34.229006][ T5266] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.149562][ T5266] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.052513][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.055720][ T5356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.060367][ T5363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.064002][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.064450][ T5363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.065406][ T5364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.065759][ T5364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.066592][ T5364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.066914][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.067323][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.067577][ T5356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.067690][ T5356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.070184][ T5363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.077141][ T4779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.081343][ T5363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.083567][ T4779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.084825][ T5366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.087022][ T5363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.087729][ T4779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.090588][ T5363] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.097926][ T4779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.100280][ T5363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.102549][ T4779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.116528][ T5361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.332757][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 38.357187][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 38.400457][ T5353] chnl_net:caif_netlink_parms(): no params data found [ 38.404948][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 38.577492][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.579988][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.582080][ T5347] bridge_slave_0: entered allmulticast mode [ 38.585190][ T5347] bridge_slave_0: entered promiscuous mode [ 38.638527][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.640726][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.643132][ T5353] bridge_slave_0: entered allmulticast mode [ 38.646034][ T5353] bridge_slave_0: entered promiscuous mode [ 38.649259][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.651215][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.653691][ T5347] bridge_slave_1: entered allmulticast mode [ 38.656364][ T5347] bridge_slave_1: entered promiscuous mode [ 38.670788][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.672966][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.675079][ T5357] bridge_slave_0: entered allmulticast mode [ 38.679827][ T5357] bridge_slave_0: entered promiscuous mode [ 38.714926][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.717452][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.719400][ T5353] bridge_slave_1: entered allmulticast mode [ 38.721527][ T5353] bridge_slave_1: entered promiscuous mode [ 38.743777][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.746221][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.748116][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.750337][ T5357] bridge_slave_1: entered allmulticast mode [ 38.753274][ T5357] bridge_slave_1: entered promiscuous mode [ 38.772845][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.775461][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.779108][ T5348] bridge_slave_0: entered allmulticast mode [ 38.782049][ T5348] bridge_slave_0: entered promiscuous mode [ 38.812294][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.817266][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.835422][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.838525][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.840904][ T5348] bridge_slave_1: entered allmulticast mode [ 38.842990][ T5348] bridge_slave_1: entered promiscuous mode [ 38.846565][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.863721][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.904044][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.939326][ T5347] team0: Port device team_slave_0 added [ 38.957113][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.962546][ T5353] team0: Port device team_slave_0 added [ 38.968416][ T5353] team0: Port device team_slave_1 added [ 38.971656][ T5347] team0: Port device team_slave_1 added [ 38.995623][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.029196][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.031185][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.040042][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.047774][ T5357] team0: Port device team_slave_0 added [ 39.072941][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.075406][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.084357][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.089633][ T5357] team0: Port device team_slave_1 added [ 39.103094][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.105599][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.115373][ T5353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.138620][ T5348] team0: Port device team_slave_0 added [ 39.141350][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.143826][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.156706][ T5353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.180966][ T5348] team0: Port device team_slave_1 added [ 39.207467][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.209969][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.219591][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.277319][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.279726][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.288560][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.293498][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.295909][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.303287][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.309183][ T5347] hsr_slave_0: entered promiscuous mode [ 39.311596][ T5347] hsr_slave_1: entered promiscuous mode [ 39.317230][ T5353] hsr_slave_0: entered promiscuous mode [ 39.319879][ T5353] hsr_slave_1: entered promiscuous mode [ 39.322430][ T5353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.325299][ T5353] Cannot create hsr debugfs directory [ 39.332666][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.335134][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.343694][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.434948][ T5357] hsr_slave_0: entered promiscuous mode [ 39.438547][ T5357] hsr_slave_1: entered promiscuous mode [ 39.440954][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.443602][ T5357] Cannot create hsr debugfs directory [ 39.505714][ T5348] hsr_slave_0: entered promiscuous mode [ 39.509663][ T5348] hsr_slave_1: entered promiscuous mode [ 39.512137][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.514893][ T5348] Cannot create hsr debugfs directory [ 39.709131][ T5353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.715480][ T5353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.720546][ T5353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.727897][ T5353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.746320][ T5347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.750037][ T5347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.753325][ T5347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.759688][ T5347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.788765][ T5357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.792203][ T5357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.798851][ T5357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.812395][ T5357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.834439][ T5348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.838074][ T5348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.842030][ T5348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.845509][ T5348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.906364][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.912996][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.931093][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.943658][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.946089][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.957982][ T5353] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.965454][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.967783][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.979443][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.981391][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.990780][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.992674][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.003707][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.025306][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.036237][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.042967][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.044879][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.059336][ T5347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.066088][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.068752][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.092833][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.104490][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.107260][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.113473][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.115449][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.131357][ T65] Bluetooth: hci1: command tx timeout [ 40.131364][ T5361] Bluetooth: hci3: command tx timeout [ 40.131511][ T5363] Bluetooth: hci0: command tx timeout [ 40.136684][ T65] Bluetooth: hci2: command tx timeout [ 40.202644][ T5353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.206212][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.239620][ T5353] veth0_vlan: entered promiscuous mode [ 40.255329][ T5353] veth1_vlan: entered promiscuous mode [ 40.271995][ T5347] veth0_vlan: entered promiscuous mode [ 40.277091][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.290263][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.297664][ T5347] veth1_vlan: entered promiscuous mode [ 40.315429][ T5353] veth0_macvtap: entered promiscuous mode [ 40.324438][ T5348] veth0_vlan: entered promiscuous mode [ 40.333329][ T5353] veth1_macvtap: entered promiscuous mode [ 40.338609][ T5348] veth1_vlan: entered promiscuous mode [ 40.354444][ T5347] veth0_macvtap: entered promiscuous mode [ 40.362327][ T5347] veth1_macvtap: entered promiscuous mode [ 40.369701][ T5357] veth0_vlan: entered promiscuous mode [ 40.375267][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.386154][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.390080][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.393362][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.399140][ T5357] veth1_vlan: entered promiscuous mode [ 40.401860][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.407710][ T5348] veth0_macvtap: entered promiscuous mode [ 40.410145][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.413082][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.417946][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.420852][ T5353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.423941][ T5353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428570][ T5353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.431519][ T5353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.440503][ T5347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.442817][ T5347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.445080][ T5347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.447624][ T5347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.451577][ T5348] veth1_macvtap: entered promiscuous mode [ 40.483856][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.488157][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.490708][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.493421][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.497461][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.513755][ T5357] veth0_macvtap: entered promiscuous mode [ 40.517037][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.520029][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.522547][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.525237][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.529091][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.542755][ T5357] veth1_macvtap: entered promiscuous mode [ 40.551736][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.554994][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.555465][ T5348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.561458][ T5348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.563721][ T5348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.565993][ T5348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.592516][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.594723][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.597120][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.600203][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.602758][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.605457][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.608434][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.611696][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.615917][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.619084][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.619255][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.621777][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.621801][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.621808][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.621814][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.621820][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.622394][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.624638][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.655397][ T5357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.658480][ T5357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.660675][ T5357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.662915][ T5357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.671700][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.674567][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.687306][ T5347] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.691088][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.693753][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.733614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.738630][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.776327][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.780169][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.794575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.802540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.901983][ T5419] tipc: Started in network mode [ 40.903821][ T5419] tipc: Node identity 925efd87d0d4, cluster identity 4711 [ 40.906787][ T5419] tipc: Enabled bearer , priority 0 [ 40.930929][ T5419] syzkaller0: entered promiscuous mode [ 40.931996][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'. [ 40.932409][ T5419] syzkaller0: entered allmulticast mode [ 40.932674][ T5419] tipc: Resetting bearer [ 40.960328][ T5418] tipc: Resetting bearer [ 41.940424][ T5393] tipc: Node number set to 1116405127 [ 42.055991][ T5418] tipc: Disabling bearer [ 42.066621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 42.074241][ T5431] tipc: Started in network mode [ 42.075574][ T5431] tipc: Node identity ac1414aa, cluster identity 4711 [ 42.077908][ T5431] tipc: Enabled bearer , priority 10 [ 42.217316][ T65] Bluetooth: hci2: command tx timeout [ 42.217340][ T5363] Bluetooth: hci1: command tx timeout [ 42.217942][ T5361] Bluetooth: hci0: command tx timeout [ 42.217976][ T5361] Bluetooth: hci3: command tx timeout [ 42.438968][ T5440] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 42.469152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.477651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 42.507285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 42.692100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 42.988285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.076588][ T57] tipc: Node number set to 2886997162 [ 43.376821][ T5393] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 43.408323][ T5448] mmap: syz.0.11 (5448) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.528539][ T5393] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 43.534018][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.539046][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.542574][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.550533][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.553655][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.558028][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.561199][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.563972][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.570374][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.574339][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.578034][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.581813][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.585649][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.589286][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.592726][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.595593][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.598919][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.602114][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.611231][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.613897][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.618170][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.620927][ T5393] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 43.623787][ T5393] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 43.627338][ T5393] usb 7-1: config 0 interface 0 has no altsetting 0 [ 43.631440][ T5393] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 43.634321][ T5393] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 43.637752][ T5393] usb 7-1: Product: syz [ 43.639053][ T5393] usb 7-1: Manufacturer: syz [ 43.640761][ T5393] usb 7-1: SerialNumber: syz [ 43.643944][ T5393] usb 7-1: config 0 descriptor?? [ 43.654526][ T5393] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 43.976678][ T5464] overlayfs: missing 'workdir' [ 44.091972][ T5465] sp0: Synchronizing with TNC [ 44.112656][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.120437][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.131753][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.137206][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.144590][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 44.150251][ T58] usb 7-1: USB disconnect, device number 2 [ 44.160233][ T58] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 44.287557][ T4779] Bluetooth: hci0: command tx timeout [ 44.289560][ T5363] Bluetooth: hci3: command tx timeout [ 44.296620][ T5363] Bluetooth: hci1: command tx timeout [ 44.298609][ T4779] Bluetooth: hci2: command tx timeout [ 44.691439][ T5363] Bluetooth: hci2: unexpected cc 0x0403 length: 65 > 1 [ 44.831706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 44.907165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 44.948748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 44.952025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.031878][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 46.035226][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 46.198782][ T5496] binder: 5489:5496 ioctl 541b 0 returned -22 [ 46.377605][ T5363] Bluetooth: hci1: command tx timeout [ 46.379592][ T5363] Bluetooth: hci3: command tx timeout [ 46.381485][ T5363] Bluetooth: hci0: command tx timeout [ 46.886138][ T5507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 46.886846][ T5509] Bluetooth: MGMT ver 1.23 [ 46.914154][ T5509] netlink: 'syz.3.25': attribute type 12 has an invalid length. [ 46.917492][ T5509] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.25'. [ 46.964501][ T5510] syz.2.23: attempt to access beyond end of device [ 46.964501][ T5510] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 46.969244][ T5510] vxfs: unable to read disk superblock at 1 [ 46.971597][ T5510] syz.2.23: attempt to access beyond end of device [ 46.971597][ T5510] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 46.975163][ T5510] vxfs: unable to read disk superblock at 8 [ 46.977477][ T5510] vxfs: can't find superblock. [ 47.246553][ T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.397354][ T30] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 47.401433][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.404326][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.408454][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.410675][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.413622][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.415967][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.420073][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.422974][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.426175][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.429241][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.432974][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.435336][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.442849][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.445209][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.448362][ T30] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 47.450677][ T30] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.455199][ T30] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 47.457635][ T30] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 47.459832][ T30] usb 8-1: Product: syz [ 47.460978][ T30] usb 8-1: Manufacturer: syz [ 47.462251][ T30] usb 8-1: SerialNumber: syz [ 47.469972][ T30] usb 8-1: config 0 descriptor?? [ 47.479819][ T30] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 47.586263][ T5513] bond0: entered promiscuous mode [ 47.588255][ T5513] bond_slave_0: entered promiscuous mode [ 47.590336][ T5513] bond_slave_1: entered promiscuous mode [ 47.611083][ T5513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.695267][ T5514] capability: warning: `syz.1.26' uses 32-bit capabilities (legacy support in use) [ 47.712044][ T8] usb 8-1: USB disconnect, device number 2 [ 47.726927][ T8] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 47.763033][ T5512] bond0: left promiscuous mode [ 47.764990][ T5512] bond_slave_0: left promiscuous mode [ 47.767789][ T5512] bond_slave_1: left promiscuous mode [ 47.908865][ T5518] input: syz0 as /devices/virtual/input/input5 [ 48.224824][ T5525] random: crng reseeded on system resumption [ 48.254836][ T5525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30'. [ 48.300620][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 48.547565][ T5535] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 48.605502][ T5535] veth1_macvtap: left promiscuous mode [ 48.768541][ T5363] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 48.771565][ T5363] Bluetooth: hci2: Injecting HCI hardware error event [ 48.775173][ T5363] Bluetooth: hci2: hardware error 0x00 [ 48.926673][ T65] Bluetooth: hci0: command 0x0401 tx timeout [ 48.926692][ T4779] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 50.859195][ T5363] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 51.103811][ T5565] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 51.106317][ T5565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.118506][ T5565] vhci_hcd vhci_hcd.0: Device attached [ 51.135623][ T5569] process 'syz.0.42' launched './file2' with NULL argv: empty string added [ 51.221387][ T5567] vhci_hcd: connection closed [ 51.227034][ T1099] vhci_hcd: stop threads [ 51.230668][ T1099] vhci_hcd: release socket [ 51.240063][ T1099] vhci_hcd: disconnect device [ 51.296688][ T58] vhci_hcd: vhci_device speed not set [ 52.660237][ T5610] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 53.317545][ T39] audit: type=1804 audit(1727784337.891:2): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.61" name="/newroot/18/file0" dev="fuse" ino=1 res=1 errno=0 [ 54.039259][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 57.080237][ T39] audit: type=1804 audit(1727784341.661:3): pid=5692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.78" name="/newroot/10/file0" dev="fuse" ino=1 res=1 errno=0 [ 57.223190][ T5711] random: crng reseeded on system resumption [ 57.237151][ T5706] veth1_macvtap: left promiscuous mode [ 57.242660][ T5711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 57.295452][ T5716] bond0: entered promiscuous mode [ 57.297434][ T5716] bond_slave_0: entered promiscuous mode [ 57.299505][ T5716] bond_slave_1: entered promiscuous mode [ 57.306861][ T5716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.335898][ T5715] input: syz0 as /devices/virtual/input/input6 [ 57.456815][ T5714] bond0: left promiscuous mode [ 57.458218][ T5714] bond_slave_0: left promiscuous mode [ 57.459862][ T5714] bond_slave_1: left promiscuous mode [ 57.603424][ T5717] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.965198][ T5731] netlink: 'syz.0.89': attribute type 12 has an invalid length. [ 57.968083][ T5731] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.89'. [ 58.226298][ T39] audit: type=1804 audit(1727784342.801:4): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.90" name="/newroot/13/file0" dev="fuse" ino=1 res=1 errno=0 [ 58.279146][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.432429][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 58.439110][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.447917][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.468094][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.470521][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.474418][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.477249][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.479922][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.482293][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.485007][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.487989][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.490883][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.493163][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.495803][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.498604][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.501426][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.503749][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.507249][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 58.509628][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 58.511948][ T8] usb 5-1: Product: syz [ 58.513078][ T8] usb 5-1: Manufacturer: syz [ 58.514314][ T8] usb 5-1: SerialNumber: syz [ 58.517979][ T8] usb 5-1: config 0 descriptor?? [ 58.529764][ T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 58.740711][ T1996] usb 5-1: USB disconnect, device number 2 [ 58.744351][ T1996] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 59.079849][ T5745] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 59.143904][ T5749] syz.3.95: attempt to access beyond end of device [ 59.143904][ T5749] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 59.148630][ T5749] vxfs: unable to read disk superblock at 1 [ 59.151050][ T5749] syz.3.95: attempt to access beyond end of device [ 59.151050][ T5749] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 59.155408][ T5749] vxfs: unable to read disk superblock at 8 [ 59.157789][ T5749] vxfs: can't find superblock. [ 59.417497][ T5754] netlink: 'syz.2.106': attribute type 12 has an invalid length. [ 59.419957][ T5754] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.700726][ T5758] sp0: Synchronizing with TNC [ 59.706595][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.878197][ T25] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 59.881946][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.885864][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.892804][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.896021][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.901092][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.904521][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.909190][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.912476][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.915860][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.919973][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.922764][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.925715][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.929666][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.932788][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.935890][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.939456][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.944620][ T25] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 59.948105][ T25] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 59.951144][ T25] usb 7-1: Product: syz [ 59.952671][ T25] usb 7-1: Manufacturer: syz [ 59.954039][ T25] usb 7-1: SerialNumber: syz [ 59.956686][ T25] usb 7-1: config 0 descriptor?? [ 59.960208][ T25] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 59.967416][ T5363] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 59.976575][ T5363] Bluetooth: hci0: command 0x0401 tx timeout [ 60.183806][ T25] usb 7-1: USB disconnect, device number 3 [ 60.189393][ T25] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 61.127503][ T39] audit: type=1804 audit(1727784345.711:5): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.101" name="/newroot/31/file0" dev="fuse" ino=1 res=1 errno=0 [ 61.976965][ T5803] netlink: 256 bytes leftover after parsing attributes in process `syz.3.108'. [ 61.987038][ T5803] openvswitch: netlink: EtherType 0 is less than min 600 [ 62.089235][ T39] audit: type=1804 audit(1727784346.671:6): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.116" name="/newroot/24/file0" dev="fuse" ino=1 res=1 errno=0 [ 64.426613][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.699103][ T30] usb 8-1: unable to get BOS descriptor or descriptor too short [ 64.702267][ T30] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 64.704360][ T30] usb 8-1: can't read configurations, error -71 [ 66.605936][ T5823] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 67.212007][ T5843] sp0: Synchronizing with TNC [ 69.656739][ T5393] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 69.821199][ T5393] usb 8-1: Using ep0 maxpacket: 32 [ 69.850502][ T5393] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 69.858070][ T5393] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 69.861151][ T5393] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 69.863708][ T5393] usb 8-1: Product: syz [ 69.865202][ T5393] usb 8-1: Manufacturer: syz [ 69.877235][ T5393] usb 8-1: SerialNumber: syz [ 69.882002][ T5393] usb 8-1: config 0 descriptor?? [ 69.887309][ T5876] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.322731][ T8] usb 8-1: USB disconnect, device number 5 [ 70.707169][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.709095][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.829778][ T57] IPVS: starting estimator thread 0... [ 70.833527][ T5899] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 70.936963][ T5902] IPVS: using max 23 ests per chain, 55200 per kthread [ 72.019880][ T5923] x_tables: duplicate underflow at hook 2 [ 72.812849][ T5936] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 73.103021][ T39] audit: type=1326 audit(1727784357.681:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.216639][ T39] audit: type=1326 audit(1727784357.681:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.222172][ T39] audit: type=1326 audit(1727784357.681:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.236543][ T39] audit: type=1326 audit(1727784357.681:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.242054][ T39] audit: type=1326 audit(1727784357.681:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.254847][ T39] audit: type=1326 audit(1727784357.691:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.267385][ T39] audit: type=1326 audit(1727784357.691:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.273350][ T39] audit: type=1326 audit(1727784357.691:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.306621][ T39] audit: type=1326 audit(1727784357.691:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 73.313067][ T39] audit: type=1326 audit(1727784357.691:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.0.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 74.648188][ T5989] x_tables: duplicate underflow at hook 2 [ 75.149961][ T5999] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 75.827130][ T1412] cfg80211: failed to load regulatory.db [ 76.062224][ T5363] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 77.297182][ T830] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.446547][ T830] usb 8-1: Using ep0 maxpacket: 16 [ 77.450890][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 77.454683][ T830] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 77.466606][ T830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.472872][ T830] usb 8-1: config 0 descriptor?? [ 77.892718][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.909544][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.959098][ T830] usbhid 8-1:0.0: can't add hid device: -71 [ 77.960710][ T830] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 77.980519][ T830] usb 8-1: USB disconnect, device number 6 [ 78.597367][ T5363] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 78.599975][ T5363] CPU: 0 UID: 0 PID: 5363 Comm: kworker/u33:5 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 78.602829][ T5363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.605701][ T5363] Workqueue: hci0 hci_rx_work [ 78.607510][ T5363] Call Trace: [ 78.608455][ T5363] [ 78.609259][ T5363] dump_stack_lvl+0x16c/0x1f0 [ 78.610527][ T5363] sysfs_warn_dup+0x7f/0xa0 [ 78.611753][ T5363] sysfs_create_dir_ns+0x24d/0x2b0 [ 78.613135][ T5363] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.614613][ T5363] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.616041][ T5363] ? kobject_add_internal+0x12d/0x990 [ 78.617493][ T5363] ? do_raw_spin_unlock+0x172/0x230 [ 78.618853][ T5363] kobject_add_internal+0x2c8/0x990 [ 78.620246][ T5363] kobject_add+0x16f/0x240 [ 78.621450][ T5363] ? __pfx_kobject_add+0x10/0x10 [ 78.622786][ T5363] ? class_to_subsys+0x3e/0x160 [ 78.624388][ T5363] ? do_raw_spin_unlock+0x172/0x230 [ 78.625802][ T5363] ? kobject_put+0xab/0x5a0 [ 78.627023][ T5363] device_add+0x289/0x1a70 [ 78.628204][ T5363] ? __pfx_dev_set_name+0x10/0x10 [ 78.629529][ T5363] ? __pfx_device_add+0x10/0x10 [ 78.630829][ T5363] ? mgmt_send_event_skb+0x2f2/0x460 [ 78.632199][ T5363] hci_conn_add_sysfs+0x17e/0x230 [ 78.633495][ T5363] le_conn_complete_evt+0xfc7/0x1cf0 [ 78.634886][ T5363] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.636383][ T5363] ? trace_contention_end+0xea/0x140 [ 78.637788][ T5363] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 78.639329][ T5363] ? skb_pull_data+0x166/0x210 [ 78.640586][ T5363] hci_le_meta_evt+0x2e2/0x5d0 [ 78.641856][ T5363] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 78.643542][ T5363] hci_event_packet+0x666/0x1190 [ 78.644878][ T5363] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.646207][ T5363] ? __pfx_hci_event_packet+0x10/0x10 [ 78.647607][ T5363] ? mark_held_locks+0x9f/0xe0 [ 78.648854][ T5363] ? kcov_remote_start+0x3cf/0x6e0 [ 78.650158][ T5363] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.651537][ T5363] hci_rx_work+0x2c6/0x1610 [ 78.652733][ T5363] ? lock_acquire+0x2f/0xb0 [ 78.653943][ T5363] ? process_one_work+0x8bb/0x1b30 [ 78.655299][ T5363] process_one_work+0x958/0x1b30 [ 78.656613][ T5363] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 78.658103][ T5363] ? __pfx_process_one_work+0x10/0x10 [ 78.659518][ T5363] ? assign_work+0x1a0/0x250 [ 78.660743][ T5363] worker_thread+0x6c8/0xf00 [ 78.661979][ T5363] ? __pfx_worker_thread+0x10/0x10 [ 78.663350][ T5363] kthread+0x2c1/0x3a0 [ 78.664425][ T5363] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.665816][ T5363] ? __pfx_kthread+0x10/0x10 [ 78.667036][ T5363] ret_from_fork+0x45/0x80 [ 78.668213][ T5363] ? __pfx_kthread+0x10/0x10 [ 78.669460][ T5363] ret_from_fork_asm+0x1a/0x30 [ 78.670739][ T5363] [ 78.671949][ T5363] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.675725][ T5363] Bluetooth: hci0: failed to register connection device [ 79.016628][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.176571][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 79.199422][ T8] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 79.203219][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.207701][ T8] usb 6-1: config 0 descriptor?? [ 79.219377][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 79.999484][ T8] gspca_nw80x: reg_r err -110 [ 80.000872][ T8] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 80.011450][ T6071] Zero length message leads to an empty skb [ 80.126675][ T4779] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 80.129889][ T4779] Bluetooth: hci0: Injecting HCI hardware error event [ 80.134702][ T4779] Bluetooth: hci0: hardware error 0x00 [ 80.615159][ T830] usb 6-1: USB disconnect, device number 2 [ 81.396547][ T830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.701512][ T830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.711704][ T830] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 81.714620][ T830] usb 5-1: can't read configurations, error -71 [ 82.216614][ T4779] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 83.931724][ T6130] netlink: 'syz.1.196': attribute type 11 has an invalid length. [ 83.934499][ T6130] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.196'. [ 84.508991][ T6135] netdevsim netdevsim1: Direct firmware load for # failed with error -2 [ 84.511990][ T6135] netdevsim netdevsim1: Falling back to sysfs fallback for: # [ 84.886573][ T830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.346578][ T830] usb 5-1: device descriptor read/64, error -110 [ 90.609174][ T830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.187605][ T830] usb 5-1: device descriptor read/64, error -110 [ 96.306556][ T830] usb usb5-port1: attempt power cycle [ 100.174584][ T830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.207672][ T830] usb 5-1: device descriptor read/8, error -32 [ 100.426603][ T830] raw-gadget.0 gadget.0: failed to queue resume event [ 100.455856][ T5363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.461809][ T5363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.465353][ T5363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.470603][ T5361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.472266][ T5363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.479291][ T5363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.481704][ T5363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.484778][ T5361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.487404][ T5361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.487554][ T830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.490104][ T5361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.494666][ T5361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.498946][ T5361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.508542][ C2] raw-gadget.0 gadget.0: ignoring, device is not running [ 100.510464][ T830] usb 5-1: device descriptor read/8, error -32 [ 100.547598][ T4779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.549056][ T5361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.553636][ T4779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.554750][ T5361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.558448][ T5361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.558873][ T4779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.565471][ T4779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.568556][ T4779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.570642][ T4779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.570999][ T5361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.572821][ T4779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.577295][ T4779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.616796][ T830] raw-gadget.0 gadget.0: failed to queue suspend event [ 100.618864][ T830] usb usb5-port1: unable to enumerate USB device [ 100.671533][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.799301][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.857240][ T6160] chnl_net:caif_netlink_parms(): no params data found [ 100.892507][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.969289][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 101.011115][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.052551][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.054948][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.057550][ T6160] bridge_slave_0: entered allmulticast mode [ 101.060192][ T6160] bridge_slave_0: entered promiscuous mode [ 101.067823][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 101.102309][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 101.110082][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.112604][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.115125][ T6160] bridge_slave_1: entered allmulticast mode [ 101.123105][ T6160] bridge_slave_1: entered promiscuous mode [ 101.217045][ T6160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.225293][ T6160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.338809][ T6160] team0: Port device team_slave_0 added [ 101.357271][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.359800][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.362321][ T6155] bridge_slave_0: entered allmulticast mode [ 101.365169][ T6155] bridge_slave_0: entered promiscuous mode [ 101.387800][ T6160] team0: Port device team_slave_1 added [ 101.400482][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.402714][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.405205][ T6155] bridge_slave_1: entered allmulticast mode [ 101.409089][ T6155] bridge_slave_1: entered promiscuous mode [ 101.495038][ T12] bridge_slave_1: left allmulticast mode [ 101.496958][ T12] bridge_slave_1: left promiscuous mode [ 101.499457][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.510093][ T12] bridge_slave_0: left allmulticast mode [ 101.512084][ T12] bridge_slave_0: left promiscuous mode [ 101.514102][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.803297][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.809609][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.814614][ T12] bond0 (unregistering): Released all slaves [ 101.821681][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.824144][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.827014][ T6157] bridge_slave_0: entered allmulticast mode [ 101.829844][ T6157] bridge_slave_0: entered promiscuous mode [ 101.833575][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.836097][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.838979][ T6157] bridge_slave_1: entered allmulticast mode [ 101.841858][ T6157] bridge_slave_1: entered promiscuous mode [ 101.884266][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.886827][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.895808][ T6160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.902668][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.905140][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.915206][ T6160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.987074][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.989607][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.992084][ T6159] bridge_slave_0: entered allmulticast mode [ 101.994890][ T6159] bridge_slave_0: entered promiscuous mode [ 101.998803][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.001265][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.003754][ T6159] bridge_slave_1: entered allmulticast mode [ 102.006666][ T6159] bridge_slave_1: entered promiscuous mode [ 102.011724][ T12] tipc: Disabling bearer [ 102.013979][ T12] tipc: Left network mode [ 102.023368][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.031667][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.056312][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.109706][ T6138] raw-gadget.0 gadget.0: failed to queue disconnect event [ 102.165148][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.170952][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.191764][ T6160] hsr_slave_0: entered promiscuous mode [ 102.194399][ T6160] hsr_slave_1: entered promiscuous mode [ 102.197763][ T6160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.200346][ T6160] Cannot create hsr debugfs directory [ 102.205142][ T6157] team0: Port device team_slave_0 added [ 102.236439][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.253624][ T6157] team0: Port device team_slave_1 added [ 102.279179][ T6155] team0: Port device team_slave_0 added [ 102.343535][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.345859][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.354510][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.361062][ T6155] team0: Port device team_slave_1 added [ 102.382458][ T6159] team0: Port device team_slave_0 added [ 102.396034][ T6159] team0: Port device team_slave_1 added [ 102.409153][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.411090][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.417855][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.455674][ T12] hsr_slave_0: left promiscuous mode [ 102.458266][ T12] hsr_slave_1: left promiscuous mode [ 102.460585][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.463157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.467473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.470244][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.493198][ T12] veth1_macvtap: left promiscuous mode [ 102.495345][ T12] veth0_macvtap: left promiscuous mode [ 102.497191][ T12] veth1_vlan: left promiscuous mode [ 102.498798][ T12] veth0_vlan: left promiscuous mode [ 102.526643][ T65] Bluetooth: hci2: command tx timeout [ 102.526758][ T4779] Bluetooth: hci4: command tx timeout [ 102.608923][ T4779] Bluetooth: hci5: command tx timeout [ 102.609079][ T65] Bluetooth: hci0: command tx timeout [ 103.100981][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.170161][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.689422][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.691852][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.700899][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.725301][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.727237][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.735090][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.740410][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.742916][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.752017][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.775422][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.777360][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.783950][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.839997][ T6155] hsr_slave_0: entered promiscuous mode [ 103.842015][ T6155] hsr_slave_1: entered promiscuous mode [ 103.843806][ T6155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.846086][ T6155] Cannot create hsr debugfs directory [ 103.850175][ T6157] hsr_slave_0: entered promiscuous mode [ 103.852710][ T6157] hsr_slave_1: entered promiscuous mode [ 103.855279][ T6157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.857786][ T6157] Cannot create hsr debugfs directory [ 103.921216][ T6159] hsr_slave_0: entered promiscuous mode [ 103.923328][ T6159] hsr_slave_1: entered promiscuous mode [ 103.925954][ T6159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.928597][ T6159] Cannot create hsr debugfs directory [ 104.015000][ T6160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.103067][ T6160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.218641][ T6160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.319884][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.337653][ T6160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.414298][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.529528][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.538166][ T6160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.553330][ T6160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.558724][ T6160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.566957][ T6160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.606854][ T4779] Bluetooth: hci4: command tx timeout [ 104.608779][ T4779] Bluetooth: hci2: command tx timeout [ 104.617047][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.635187][ T6160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.687033][ T4779] Bluetooth: hci5: command tx timeout [ 104.687103][ T6160] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.696106][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.698658][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.702224][ T4779] Bluetooth: hci0: command tx timeout [ 104.717926][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.720438][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.783116][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.869723][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.886918][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.947538][ T6160] veth0_vlan: entered promiscuous mode [ 104.958693][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.966007][ T6160] veth1_vlan: entered promiscuous mode [ 104.977783][ T6160] veth0_macvtap: entered promiscuous mode [ 104.981034][ T6160] veth1_macvtap: entered promiscuous mode [ 104.988605][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.991499][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.994795][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.998319][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.001373][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.004719][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.010849][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.016372][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.020217][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.023224][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.025983][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.028735][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.031716][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.035371][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.040868][ T6160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.044007][ T6160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.047537][ T6160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.050395][ T6160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.088686][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.120507][ T6157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.122514][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.124629][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.141583][ T6157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.150543][ T6157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.157607][ T6157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.164318][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.169170][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.221954][ T12] bridge_slave_1: left allmulticast mode [ 105.223481][ T12] bridge_slave_1: left promiscuous mode [ 105.225649][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.230466][ T12] bridge_slave_0: left allmulticast mode [ 105.232077][ T12] bridge_slave_0: left promiscuous mode [ 105.233678][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.243101][ T12] bridge_slave_1: left allmulticast mode [ 105.244797][ T12] bridge_slave_1: left promiscuous mode [ 105.246293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.251642][ T12] bridge_slave_0: left allmulticast mode [ 105.253629][ T12] bridge_slave_0: left promiscuous mode [ 105.255612][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.273682][ T12] bridge_slave_1: left allmulticast mode [ 105.275203][ T12] bridge_slave_1: left promiscuous mode [ 105.279853][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.283866][ T12] bridge_slave_0: left allmulticast mode [ 105.285389][ T12] bridge_slave_0: left promiscuous mode [ 105.287127][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.338051][ T6246] sctp: [Deprecated]: syz.3.205 (pid 6246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.338051][ T6246] Use struct sctp_sack_info instead [ 105.971826][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.978629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.982300][ T12] bond0 (unregistering): Released all slaves [ 106.045323][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.058429][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.061981][ T12] bond0 (unregistering): Released all slaves [ 106.126288][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.139031][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.143290][ T12] bond0 (unregistering): Released all slaves [ 106.209467][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.238869][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.259386][ T12] tipc: Left network mode [ 106.309354][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.311405][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.328418][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.330666][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.570768][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.610808][ T6157] veth0_vlan: entered promiscuous mode [ 106.628219][ T6157] veth1_vlan: entered promiscuous mode [ 106.667041][ T6157] veth0_macvtap: entered promiscuous mode [ 106.671833][ T6157] veth1_macvtap: entered promiscuous mode [ 106.685317][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.691565][ T65] Bluetooth: hci2: command tx timeout [ 106.693499][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.693512][ T4779] Bluetooth: hci4: command tx timeout [ 106.693561][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.701406][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.704960][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.708415][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.710980][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.713990][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.719240][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.739103][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.742556][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.745815][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.748829][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.751416][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.754120][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.756708][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.759371][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.763182][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.769498][ T6157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.772375][ T6157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.775372][ T6157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.778193][ T6157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.778538][ T4779] Bluetooth: hci0: command tx timeout [ 106.782552][ T4779] Bluetooth: hci5: command tx timeout [ 106.858499][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.860628][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.883069][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.885393][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.923234][ T6159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.965287][ T6159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.974964][ T6159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.984973][ T6159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.049501][ T6155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.060229][ T6282] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 107.060491][ T6155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.095867][ T6155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.108289][ T6155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.295032][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.368062][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.412846][ T6294] netlink: 'syz.3.206': attribute type 10 has an invalid length. [ 107.415945][ T6294] bridge0: port 3(team0) entered blocking state [ 107.419774][ T6294] bridge0: port 3(team0) entered disabled state [ 107.422417][ T6294] team0: entered allmulticast mode [ 107.424041][ T6294] team_slave_0: entered allmulticast mode [ 107.425767][ T6294] team_slave_1: entered allmulticast mode [ 107.433292][ T6294] team0: entered promiscuous mode [ 107.435167][ T6294] team_slave_0: entered promiscuous mode [ 107.438405][ T6294] team_slave_1: entered promiscuous mode [ 107.444038][ T6294] bridge0: port 3(team0) entered blocking state [ 107.446315][ T6294] bridge0: port 3(team0) entered forwarding state [ 107.490108][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.492123][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.512837][ T12] hsr_slave_0: left promiscuous mode [ 107.515413][ T12] hsr_slave_1: left promiscuous mode [ 107.521936][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.524537][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.531640][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.534219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.545542][ T12] hsr_slave_0: left promiscuous mode [ 107.555702][ T12] hsr_slave_1: left promiscuous mode [ 107.561368][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.563856][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.567533][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.570077][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.589224][ T12] hsr_slave_0: left promiscuous mode [ 107.593970][ T12] hsr_slave_1: left promiscuous mode [ 107.596300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.599896][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.618053][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.620456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.731852][ T12] veth1_macvtap: left promiscuous mode [ 107.733950][ T12] veth0_macvtap: left promiscuous mode [ 107.738444][ T12] veth1_vlan: left promiscuous mode [ 107.741908][ T12] veth0_vlan: left promiscuous mode [ 107.763083][ T12] veth0_macvtap: left promiscuous mode [ 107.765099][ T12] veth1_vlan: left promiscuous mode [ 107.768445][ T12] veth0_vlan: left promiscuous mode [ 107.774244][ T12] veth0_macvtap: left promiscuous mode [ 107.776952][ T12] veth1_vlan: left promiscuous mode [ 107.778915][ T12] veth0_vlan: left promiscuous mode [ 108.730970][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.776652][ T65] Bluetooth: hci4: command tx timeout [ 108.778326][ T65] Bluetooth: hci2: command tx timeout [ 108.806779][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.846623][ T4779] Bluetooth: hci5: command tx timeout [ 108.848120][ T4779] Bluetooth: hci0: command tx timeout [ 109.966120][ T12] team0 (unregistering): Port device team_slave_1 removed [ 110.046169][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.005328][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.075503][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.589497][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.591788][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.595813][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.611318][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.615315][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.617970][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.660578][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.662510][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.673358][ T6159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.797442][ T6311] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 111.808334][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.839425][ T6159] veth0_vlan: entered promiscuous mode [ 111.843692][ T6159] veth1_vlan: entered promiscuous mode [ 111.932063][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.943377][ T6159] veth0_macvtap: entered promiscuous mode [ 111.967936][ T6159] veth1_macvtap: entered promiscuous mode [ 111.972264][ T6155] veth0_vlan: entered promiscuous mode [ 111.983024][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.985798][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.988825][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.991504][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.995247][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.003509][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.006253][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.009138][ T6159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.011822][ T6159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.015499][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.025919][ T6155] veth1_vlan: entered promiscuous mode [ 112.033786][ T6159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.036410][ T6159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.039959][ T6159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.042632][ T6159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.092907][ T6155] veth0_macvtap: entered promiscuous mode [ 112.103909][ T6155] veth1_macvtap: entered promiscuous mode [ 112.107142][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.114524][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.132773][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.134080][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.135458][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.142364][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.145923][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.149925][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.153253][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.157861][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.162718][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.172156][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.175872][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.179732][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.183291][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.187425][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.190771][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.203449][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.216226][ T6155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.218698][ T6155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.222211][ T6155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.225319][ T6155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.266336][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.269903][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.280055][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.284506][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.329666][ T6334] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 112.332351][ T1412] IPVS: starting estimator thread 0... [ 112.437963][ T6335] IPVS: using max 35 ests per chain, 84000 per kthread [ 112.730348][ T6343] loop0: detected capacity change from 0 to 7 [ 112.735161][ T6343] Dev loop0: unable to read RDB block 7 [ 112.737989][ T6343] loop0: AHDI p1 p2 p4 [ 112.739141][ T6343] loop0: partition table partially beyond EOD, truncated [ 112.741745][ T6343] loop0: p1 start 134217728 is beyond EOD, truncated [ 112.774751][ T12] IPVS: stop unused estimator thread 0... [ 112.858122][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 112.858134][ T39] audit: type=1326 audit(1727784397.441:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.3.217" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x0 [ 112.935751][ T6347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.217'. [ 113.032810][ T6350] autofs: Bad value for 'fd' [ 113.091210][ T39] audit: type=1804 audit(1727784397.671:57): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.218" name="/newroot/1/bus/bus" dev="overlay" ino=40 res=1 errno=0 [ 113.453761][ T6329] veth0_vlan: left promiscuous mode [ 114.629727][ T6372] ptrace attach of "/syz-executor exec"[6160] was attempted by "/syz-executor exec"[6372] [ 115.856561][ T1412] psmouse serio2: Failed to reset mouse on : -5 [ 116.721364][ T6398] tipc: Started in network mode [ 116.723067][ T6398] tipc: Node identity 4, cluster identity 4711 [ 116.725326][ T6398] tipc: Node number set to 4 [ 116.737874][ T6398] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 116.860877][ T39] audit: type=1326 audit(1727784401.440:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.867938][ T39] audit: type=1326 audit(1727784401.440:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.875257][ T39] audit: type=1326 audit(1727784401.440:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.882934][ T39] audit: type=1326 audit(1727784401.450:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.889541][ T39] audit: type=1326 audit(1727784401.450:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.897610][ T39] audit: type=1326 audit(1727784401.450:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.904995][ T39] audit: type=1326 audit(1727784401.450:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.912682][ T39] audit: type=1326 audit(1727784401.450:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 116.925389][ T6400] Illegal XDP return value 840947310 on prog (id 46) dev syz_tun, expect packet loss! [ 117.056113][ T6405] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.776234][ T6432] bridge0: port 3(syz_tun) entered blocking state [ 118.780946][ T6432] bridge0: port 3(syz_tun) entered disabled state [ 118.786091][ T6432] syz_tun: entered allmulticast mode [ 118.796110][ T6432] syz_tun: entered promiscuous mode [ 118.801645][ T6432] bridge0: port 3(syz_tun) entered blocking state [ 118.804028][ T6432] bridge0: port 3(syz_tun) entered forwarding state [ 119.506524][ T1412] misc userio: Buffer overflowed, userio client isn't keeping up [ 120.521003][ T6455] nbd: device at index 2 is going down [ 120.799630][ T1412] input: PS/2 Generic Mouse as /devices/serio2/input/input9 [ 121.026544][ T1412] psmouse serio2: Failed to enable mouse on [ 121.945709][ T6472] bridge0: port 4(syz_tun) entered blocking state [ 121.949347][ T6472] bridge0: port 4(syz_tun) entered disabled state [ 121.952667][ T6472] syz_tun: entered allmulticast mode [ 121.955288][ T6472] syz_tun: entered promiscuous mode [ 121.958952][ T6472] bridge0: port 4(syz_tun) entered blocking state [ 121.960664][ T6472] bridge0: port 4(syz_tun) entered forwarding state [ 121.978038][ T6473] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 121.999387][ T6473] warning: `syz.1.260' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.099736][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 123.099747][ T39] audit: type=1804 audit(1727784407.680:106): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.256" name="/newroot/13/file0" dev="fuse" ino=1 res=1 errno=0 [ 123.904336][ T39] audit: type=1326 audit(1727784408.480:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.2.262" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x0 [ 124.745201][ T39] audit: type=1804 audit(1727784409.320:108): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.268" name="/newroot/17/file0" dev="fuse" ino=1 res=1 errno=0 [ 125.587639][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 125.914381][ T39] audit: type=1804 audit(1727784410.490:109): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.277" name="/newroot/14/file0" dev="fuse" ino=1 res=1 errno=0 [ 126.242278][ T39] audit: type=1804 audit(1727784410.820:110): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.288" name="/newroot/24/file0" dev="fuse" ino=1 res=1 errno=0 [ 126.536682][ T65] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 126.733293][ T6588] fuse: Bad value for 'fd' [ 126.821293][ T6592] fuse: Bad value for 'fd' [ 127.459505][ T6601] autofs: Bad value for 'fd' [ 127.567742][ T39] audit: type=1804 audit(1727784412.150:111): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.291" name="/newroot/16/bus/bus" dev="overlay" ino=110 res=1 errno=0 [ 128.706963][ T6627] nbd1: detected capacity change from 0 to 22 [ 128.715764][ T6625] block nbd1: shutting down sockets [ 128.723468][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.726693][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.732076][ T2372] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.735957][ T2372] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.740164][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.742641][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.744923][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.748689][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.751099][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.753429][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.755497][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.758115][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.760187][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.762535][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.764598][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.767038][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.770473][ T5358] ldm_validate_partition_table(): Disk read failed. [ 128.772221][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.774533][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.776820][ T5358] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.779387][ T5358] Buffer I/O error on dev nbd1, logical block 0, async page read [ 128.781493][ T5358] Dev nbd1: unable to read RDB block 0 [ 128.783064][ T5358] nbd1: unable to read partition table [ 128.785757][ T5358] nbd1: partition table beyond EOD, truncated [ 128.789918][ T6625] ldm_validate_partition_table(): Disk read failed. [ 128.792154][ T6625] Dev nbd1: unable to read RDB block 0 [ 128.794081][ T6625] nbd1: unable to read partition table [ 128.797229][ T6625] nbd1: partition table beyond EOD, truncated [ 128.800393][ T5358] ldm_validate_partition_table(): Disk read failed. [ 128.802258][ T5358] Dev nbd1: unable to read RDB block 0 [ 128.803749][ T5358] nbd1: unable to read partition table [ 128.805318][ T5358] nbd1: partition table beyond EOD, truncated [ 130.161544][ T6675] trusted_key: syz.3.319 sent an empty control message without MSG_MORE. [ 130.239922][ T6673] ALSA: mixer_oss: invalid OSS volume 'PHONEIÎ' [ 130.242816][ T6673] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 130.587877][ T6691] ptrace attach of "/syz-executor exec"[6157] was attempted by "/syz-executor exec"[6691] [ 130.592576][ T39] audit: type=1326 audit(1727784415.170:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.0.323" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x0 [ 132.129378][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.131375][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849838][ T6730] netlink: 'syz.0.336': attribute type 4 has an invalid length. [ 132.871208][ T6730] netlink: 'syz.0.336': attribute type 4 has an invalid length. [ 132.889696][ T6730] syz.0.336 (6730) used greatest stack depth: 21168 bytes left [ 133.277400][ T6742] autofs: Bad value for 'fd' [ 133.308238][ T6744] overlayfs: missing 'lowerdir' [ 133.340382][ T39] audit: type=1804 audit(1727784417.920:113): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.337" name="/newroot/30/bus/bus" dev="overlay" ino=197 res=1 errno=0 [ 133.615045][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 133.630640][ T6746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.338'. [ 133.941453][ T6753] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.350'. [ 135.454174][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.673052][ T6782] fuse: Bad value for 'fd' [ 136.104596][ T39] audit: type=1804 audit(1727784420.680:114): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.358" name="/newroot/42/file0" dev="fuse" ino=1 res=1 errno=0 [ 136.870515][ T6815] veth0_vlan: left promiscuous mode [ 137.848900][ T39] audit: type=1326 audit(1727784422.430:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.0.370" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x0 [ 137.888824][ T39] audit: type=1804 audit(1727784422.470:116): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.369" name="/newroot/38/file0" dev="fuse" ino=1 res=1 errno=0 [ 138.036797][ T6849] usb usb8: usbfs: process 6849 (syz.3.373) did not claim interface 0 before use [ 138.546633][ T830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.706623][ T830] usb 6-1: Using ep0 maxpacket: 16 [ 138.711291][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.714915][ T830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.719471][ T830] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.722548][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.727595][ T830] usb 6-1: config 0 descriptor?? [ 140.061973][ T830] usbhid 6-1:0.0: can't add hid device: -71 [ 140.076134][ T830] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 140.099764][ T830] usb 6-1: USB disconnect, device number 3 [ 141.147642][ T6880] kAFS: unable to lookup cell '.,' [ 141.181916][ T6884] fuse: Bad value for 'fd' [ 141.966567][ T1412] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.096602][ T1412] usb 6-1: device descriptor read/64, error -71 [ 142.336566][ T1412] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 142.466797][ T1412] usb 6-1: device descriptor read/64, error -71 [ 142.586607][ T1412] usb usb6-port1: attempt power cycle [ 142.884421][ T39] audit: type=1326 audit(1727784427.460:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.3.388" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x0 [ 142.926606][ T1412] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 142.947064][ T1412] usb 6-1: device descriptor read/8, error -71 [ 143.186590][ T1412] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 143.207230][ T1412] usb 6-1: device descriptor read/8, error -71 [ 143.326738][ T1412] usb usb6-port1: unable to enumerate USB device [ 143.815011][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 144.699039][ T39] audit: type=1804 audit(1727784429.280:118): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.399" name="/newroot/56/file0/bus" dev="9p" ino=36049945 res=1 errno=0 [ 148.100629][ T6958] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.412'. [ 148.118310][ T6958] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 149.288753][ T6977] tipc: Failed to remove unknown binding: 66,1,1/4:3843219932/3843219934 [ 149.296735][ T6977] tipc: Failed to remove unknown binding: 66,1,1/4:3843219932/3843219934 [ 151.976410][ T6987] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 152.266519][ T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.416602][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 152.426670][ T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 152.426797][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.450459][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.453594][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.460280][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.464176][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.468495][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.739217][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 152.741291][ T56] usbtmc 5-1:16.0: can't read capabilities [ 153.001519][ T6989] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 153.062405][ T1996] usb 5-1: USB disconnect, device number 9 [ 154.286592][ T57] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 154.457144][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 154.462793][ T57] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 154.471324][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.479352][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.488052][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 154.495411][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 154.500359][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.504299][ T57] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 154.507870][ T57] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 154.517045][ T57] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.520509][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.523333][ T57] usb 8-1: SerialNumber: syz [ 154.551199][ T57] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 155.204630][ T39] audit: type=1804 audit(1727784439.780:119): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.426" name="/newroot/66/file0" dev="fuse" ino=1 res=1 errno=0 [ 156.654074][ T30] usb 8-1: USB disconnect, device number 7 [ 156.680442][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 156.691521][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.693733][ T7043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.726210][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.729101][ T7043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.987736][ T7049] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.690723][ T7059] usb 2-1: USB disconnect, device number 2 [ 160.215156][ T39] audit: type=1804 audit(1727784444.790:120): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.439" name="/newroot/55/file0/bus" dev="9p" ino=36049945 res=1 errno=0 [ 161.330351][ T39] audit: type=1326 audit(1727784445.910:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.1.444" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 163.329576][ T7113] netlink: 'syz.0.451': attribute type 7 has an invalid length. [ 163.331616][ T7113] netlink: 15 bytes leftover after parsing attributes in process `syz.0.451'. [ 163.333924][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.451'. [ 163.336232][ T7113] netlink: 872 bytes leftover after parsing attributes in process `syz.0.451'. [ 163.364808][ T7113] netlink: 'syz.0.451': attribute type 7 has an invalid length. [ 163.376651][ T7113] netlink: 15 bytes leftover after parsing attributes in process `syz.0.451'. [ 163.609539][ T5362] [ 163.610410][ T5362] ============================================ [ 163.612057][ T5362] WARNING: possible recursive locking detected [ 163.613632][ T5362] 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 Not tainted [ 163.617563][ T5362] -------------------------------------------- [ 163.620032][ T5362] udevd/5362 is trying to acquire lock: [ 163.621858][ T5362] ffffc9000de910d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.625049][ T5362] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 163.625049][ T5362] but task is already holding lock: [ 163.627570][ T5362] ffffc9000e6b10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.630818][ T5362] [ 163.630818][ T5362] other info that might help us debug this: [ 163.633477][ T5362] Possible unsafe locking scenario: [ 163.633477][ T5362] [ 163.635958][ T5362] CPU0 [ 163.637124][ T5362] ---- [ 163.638264][ T5362] lock(&rb->spinlock); [ 163.639711][ T5362] lock(&rb->spinlock); [ 163.641179][ T5362] [ 163.641179][ T5362] *** DEADLOCK *** [ 163.641179][ T5362] [ 163.643901][ T5362] May be due to missing lock nesting notation [ 163.643901][ T5362] [ 163.646643][ T5362] 3 locks held by udevd/5362: [ 163.648242][ T5362] #0: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x1d1/0x5a0 [ 163.651397][ T5362] #1: ffffc9000e6b10d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.654722][ T5362] #2: ffffffff8ddb7800 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 163.657843][ T5362] [ 163.657843][ T5362] stack backtrace: [ 163.659789][ T5362] CPU: 1 UID: 0 PID: 5362 Comm: udevd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 163.663177][ T5362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.666780][ T5362] Call Trace: [ 163.667906][ T5362] [ 163.668910][ T5362] dump_stack_lvl+0x116/0x1f0 [ 163.670524][ T5362] print_deadlock_bug+0x2e3/0x410 [ 163.672227][ T5362] __lock_acquire+0x2185/0x3ce0 [ 163.673860][ T5362] ? __pfx___lock_acquire+0x10/0x10 [ 163.675622][ T5362] ? hlock_class+0x4e/0x130 [ 163.677285][ T5362] ? __lock_acquire+0xbdd/0x3ce0 [ 163.678958][ T5362] lock_acquire.part.0+0x11b/0x380 [ 163.680692][ T5362] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.682502][ T5362] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 163.684426][ T5362] ? rcu_is_watching+0x12/0xc0 [ 163.686064][ T5362] ? trace_lock_acquire+0x14a/0x1d0 [ 163.687830][ T5362] ? __pfx___lock_acquire+0x10/0x10 [ 163.689599][ T5362] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.691427][ T5362] ? lock_acquire+0x2f/0xb0 [ 163.692959][ T5362] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.694779][ T5362] _raw_spin_lock_irqsave+0x3a/0x60 [ 163.696525][ T5362] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.698336][ T5362] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.700110][ T5362] ? trace_lock_acquire+0x14a/0x1d0 [ 163.701869][ T5362] ? bpf_trace_run2+0x1c2/0x590 [ 163.703502][ T5362] bpf_ringbuf_reserve+0x57/0x90 [ 163.705207][ T5362] bpf_prog_0e153dac479590bf+0x35/0x70 [ 163.707091][ T5362] bpf_trace_run2+0x231/0x590 [ 163.708800][ T5362] ? __pfx_bpf_trace_run2+0x10/0x10 [ 163.710560][ T5362] ? hlock_class+0x4e/0x130 [ 163.712124][ T5362] trace_contention_begin.constprop.0+0xed/0x170 [ 163.714248][ T5362] __pv_queued_spin_lock_slowpath+0x10b/0xc90 [ 163.716274][ T5362] ? __pfx___lock_acquire+0x10/0x10 [ 163.717995][ T5362] ? __lock_acquire+0xbdd/0x3ce0 [ 163.719634][ T5362] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 163.721824][ T5362] do_raw_spin_lock+0x210/0x2c0 [ 163.723446][ T5362] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.725258][ T5362] ? lock_acquire+0x2f/0xb0 [ 163.726784][ T5362] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.728605][ T5362] _raw_spin_lock_irqsave+0x42/0x60 [ 163.730334][ T5362] ? __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.732188][ T5362] __bpf_ringbuf_reserve+0x36e/0x4b0 [ 163.733948][ T5362] bpf_ringbuf_reserve+0x57/0x90 [ 163.735599][ T5362] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 163.737428][ T5362] bpf_trace_run3+0x240/0x5a0 [ 163.739009][ T5362] ? __pfx_bpf_trace_run3+0x10/0x10 [ 163.740773][ T5362] ? putname+0x12e/0x170 [ 163.742212][ T5362] ? lock_acquire+0x2f/0xb0 [ 163.743755][ T5362] ? mntput_no_expire+0x9b/0xaf0 [ 163.745436][ T5362] ? __bpf_trace_kmem_cache_free+0x8e/0xc0 [ 163.747402][ T5362] ? putname+0x12e/0x170 [ 163.748845][ T5362] __traceiter_kmem_cache_free+0x35/0x50 [ 163.750697][ T5362] kmem_cache_free+0x200/0x4b0 [ 163.752312][ T5362] putname+0x12e/0x170 [ 163.753706][ T5362] do_renameat2+0x2d9/0xdd0 [ 163.755299][ T5362] ? __pfx_do_renameat2+0x10/0x10 [ 163.757027][ T5362] ? trace_lock_acquire+0x14a/0x1d0 [ 163.758776][ T5362] ? lock_acquire+0x2f/0xb0 [ 163.760325][ T5362] ? __might_fault+0xe3/0x190 [ 163.761933][ T5362] ? __might_fault+0xe3/0x190 [ 163.763533][ T5362] ? getname_flags.part.0+0x1c5/0x550 [ 163.765370][ T5362] __x64_sys_rename+0x7d/0xa0 [ 163.766944][ T5362] do_syscall_64+0xcd/0x250 [ 163.768469][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.770421][ T5362] RIP: 0033:0x7fe0a369a93b [ 163.771913][ T5362] Code: 48 8b 15 f0 64 15 00 83 c8 ff 64 83 3a 15 75 0e 48 8b 7c 24 08 e8 d5 d4 07 00 f7 d8 19 c0 48 83 c4 18 c3 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 be 64 15 00 f7 d8 64 89 02 48 83 [ 163.778320][ T5362] RSP: 002b:00007ffc832e9a98 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 163.781119][ T5362] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe0a369a93b [ 163.783784][ T5362] RDX: 000055da5dfa052a RSI: 00007ffc832e9ab8 RDI: 00007ffc832e9eb8 [ 163.786448][ T5362] RBP: 000055df0009b370 R08: 0000000000000006 R09: d46d3af2a1ba446a [ 163.789090][ T5362] R10: 00000000000001b6 R11: 0000000000000206 R12: 000055df0009a480 [ 163.791729][ T5362] R13: 00007ffc832e9ab8 R14: 00007ffc832e9eb8 R15: 000055ded9556160 [ 163.794412][ T5362] [ 163.899492][ T7115] bridge0: port 4(syz_tun) entered disabled state [ 163.909032][ T7115] syz_tun (unregistering): left allmulticast mode [ 163.911367][ T7115] syz_tun (unregistering): left promiscuous mode [ 163.913780][ T7115] bridge0: port 4(syz_tun) entered disabled state [ 163.947954][ T7122] bridge0: port 3(syz_tun) entered disabled state [ 163.951422][ T7122] syz_tun (unregistering): left allmulticast mode [ 163.953742][ T7122] syz_tun (unregistering): left promiscuous mode [ 163.955802][ T7122] bridge0: port 3(syz_tun) entered disabled state [ 164.181182][ T1099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.279276][ T1099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.379478][ T1099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.451628][ T1099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.522269][ T1099] bridge_slave_1: left allmulticast mode [ 164.524380][ T1099] bridge_slave_1: left promiscuous mode [ 164.526641][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.530162][ T1099] bridge_slave_0: left allmulticast mode [ 164.532139][ T1099] bridge_slave_0: left promiscuous mode [ 164.534152][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.652006][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.656810][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.660740][ T1099] bond0 (unregistering): Released all slaves [ 164.736626][ T1099] tipc: Left network mode [ 165.042999][ T1099] hsr_slave_0: left promiscuous mode [ 165.045458][ T1099] hsr_slave_1: left promiscuous mode [ 165.048903][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.051462][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.053754][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.055588][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.059749][ T1099] veth1_macvtap: left promiscuous mode [ 165.061219][ T1099] veth0_macvtap: left promiscuous mode [ 165.062700][ T1099] veth1_vlan: left promiscuous mode [ 165.064088][ T1099] veth0_vlan: left promiscuous mode [ 165.246672][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 165.293254][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 165.802912][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.860957][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.949210][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.009611][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.094676][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.159312][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.231656][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.312647][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.393276][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.457948][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.521781][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.585990][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.748695][ T1099] team0: left allmulticast mode [ 166.750009][ T1099] team_slave_0: left allmulticast mode [ 166.751437][ T1099] team_slave_1: left allmulticast mode [ 166.753218][ T1099] team0: left promiscuous mode [ 166.754585][ T1099] team_slave_0: left promiscuous mode [ 166.756064][ T1099] team_slave_1: left promiscuous mode [ 166.757977][ T1099] bridge0: port 3(team0) entered disabled state [ 166.762679][ T1099] bridge_slave_1: left allmulticast mode [ 166.764699][ T1099] bridge_slave_1: left promiscuous mode [ 166.769587][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.773136][ T1099] bridge_slave_0: left allmulticast mode [ 166.775071][ T1099] bridge_slave_0: left promiscuous mode [ 166.778759][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.783128][ T1099] bridge_slave_1: left allmulticast mode [ 166.785155][ T1099] bridge_slave_1: left promiscuous mode [ 166.788067][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.792353][ T1099] bridge_slave_0: left allmulticast mode [ 166.794306][ T1099] bridge_slave_0: left promiscuous mode [ 166.796326][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.801198][ T1099] bridge_slave_1: left allmulticast mode [ 166.803147][ T1099] bridge_slave_1: left promiscuous mode [ 166.804839][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.817190][ T1099] bridge_slave_0: left allmulticast mode [ 166.819122][ T1099] bridge_slave_0: left promiscuous mode [ 166.821098][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.317095][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.322361][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.326797][ T1099] bond0 (unregistering): Released all slaves [ 167.341287][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.346074][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.350581][ T1099] bond0 (unregistering): Released all slaves [ 167.363479][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.368633][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.373047][ T1099] bond0 (unregistering): Released all slaves [ 167.508245][ T1099] IPVS: stopping backup sync thread 6987 ... [ 168.110265][ T1099] hsr_slave_0: left promiscuous mode [ 168.113363][ T1099] hsr_slave_1: left promiscuous mode [ 168.117108][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.119772][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.123551][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.126264][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.137083][ T1099] hsr_slave_0: left promiscuous mode [ 168.140284][ T1099] hsr_slave_1: left promiscuous mode [ 168.146788][ T1099] hsr_slave_0: left promiscuous mode [ 168.149883][ T1099] hsr_slave_1: left promiscuous mode [ 168.153024][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.155531][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.159035][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.161527][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.168738][ T1099] veth1_macvtap: left promiscuous mode [ 168.170659][ T1099] veth0_macvtap: left promiscuous mode [ 168.172607][ T1099] veth1_vlan: left promiscuous mode [ 168.177101][ T1099] veth1_macvtap: left promiscuous mode [ 168.178582][ T1099] veth0_macvtap: left promiscuous mode [ 168.180050][ T1099] veth1_vlan: left promiscuous mode [ 168.181941][ T1099] veth1_macvtap: left promiscuous mode [ 168.183529][ T1099] veth0_macvtap: left promiscuous mode [ 168.185161][ T1099] veth1_vlan: left promiscuous mode [ 168.186928][ T1099] veth0_vlan: left promiscuous mode [ 168.389672][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 168.429486][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 168.664896][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 168.707665][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 168.985318][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 169.019275][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 171.640198][ T1099] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 12:07:28 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000f6 RBX=0000000000000001 RCX=000000000000083f RDX=0000000000000000 RSI=00000000000000f6 RDI=000000000000003f RBP=00000000201d0001 RSP=ffffc90000007998 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000004f R12=0000000000000000 R13=0000000053b5e743 R14=0000000000000002 R15=000000000003ffff RIP=ffffffff813bb0f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002cb08ff8 CR3=000000006a548000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035a15 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc9000387f048 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000062 R14=ffffffff850359b0 R15=0000000000000000 RIP=ffffffff85035a3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe0a3b26280 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7405008 CR3=000000001f0ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000002 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc832e9a70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff00ff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727265006d25203a 7d73257b52545441 20676e6974697277 20726f7272650065 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e5e490041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 000055df00086410 0000000000000051 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000000003431 6c6c696b66722f38 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64007aba6c7d5b2f 6d2f26a32ed6301a 737334b36327bb19 732f55f52e8c521e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000030 2f6d3a7377684431 000030385d611800 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000231 0000000000000030 00003a7300084410 000030385d611800 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc9000e6b1070 RCX=ffffffff81adb826 RDX=ffff888021e24880 RSI=ffffffff81adbab5 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900042ff4c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000014 R13=ffffc9000e6b1000 R14=0000000000000020 R15=ffffc9000e6b10c0 RIP=ffffffff81adbab5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73b6f74 CR3=0000000029fec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73bbff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001bb47c RBX=0000000000000003 RCX=ffffffff8b12f739 RDX=ffffed10056e7026 RSI=ffffffff8bb11fe0 RDI=ffffffff8164098c RBP=ffffed100376a488 RSP=ffffc90000497e08 R8 =0000000000000000 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000001 R12=0000000000000003 R13=ffff88801bb52440 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056bc24c0 CR3=0000000057cb0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000