last executing test programs: 1m46.668275507s ago: executing program 0 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d0000008500000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='net_dev_start_xmit\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r5, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY3\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 34.298595678s ago: executing program 1 (id=1455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 30.621173779s ago: executing program 0 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d0000008500000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='net_dev_start_xmit\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r5, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 23.218005675s ago: executing program 0 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d0000008500000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='net_dev_start_xmit\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r5, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 14.289647632s ago: executing program 0 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d0000008500000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='net_dev_start_xmit\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r5, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 6.45936262s ago: executing program 0 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d0000008500000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='net_dev_start_xmit\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r5, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r3, @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) r12 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r12, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 4.301699261s ago: executing program 3 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 4.30070955s ago: executing program 3 (id=1668): socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903, 0x0, 0x6, 0xa4}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0xfffffffffffffe97}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 3.390378872s ago: executing program 3 (id=1671): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x10}, {0x814c}, {0x10001, 0xf19f}, {}, {0x10000, 0x9}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="397100000000060000000058da653490e23d917a961f39468fdad7bd428ce427ef", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0000000001000000000000000000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf2505000000", @ANYRES32=r3, @ANYBLOB="86a311707d94f6bc316e577ef3def46c113fee2bb514766f5be099da6e23d51765a75e25bba977fbd4ab6bbb770e51745f"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x24000051) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000540)='veth0_to_bond\x00') mmap(&(0x7f0000046000/0x2000)=nil, 0x2000, 0x0, 0x110, r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xe4) getegid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) 1.885519503s ago: executing program 3 (id=1677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}], 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rseq(&(0x7f0000000000), 0x62, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0f20c06635000004000f22c00f005e34f4b881000f00d80f21c63e0f01c2ba4300b80400efde76170f01ca660f3807950000", 0x32}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x10202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.882152329s ago: executing program 2 (id=1678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="07000000010001", 0x7) 1.796185775s ago: executing program 2 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000080)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x0) 1.740439046s ago: executing program 2 (id=1680): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x10}, {0x814c}, {0x10001, 0xf19f}, {}, {0x10000, 0x9}, {}, {0x0, 0xfffffffc}], 0x0, 0x0, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="397100000000060000000058da653490e23d917a961f39468fdad7bd428ce427ef", @ANYRESHEX, @ANYBLOB="0000000001000000000000000000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf2505000000", @ANYRES32=r3, @ANYBLOB="86a311707d94f6bc316e577ef3def46c113fee2bb514766f5be099da6e23d51765a75e25bba977fbd4ab6bbb770e51745f"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYBLOB="0600280002000000", @ANYBLOB="00022cbd7000fddbdf250e000000080034000080000008", @ANYRESDEC=r2, @ANYRES8=r0, @ANYRESHEX=r2], 0x2c}}, 0x24000051) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000540)='veth0_to_bond\x00') mmap(&(0x7f0000046000/0x2000)=nil, 0x2000, 0x0, 0x110, r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xe4) getegid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) 1.406368673s ago: executing program 3 (id=1681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4008044) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c000280080003400000f3230900010073797a300000feff0900020073797a32"], 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) shutdown(r4, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052ca", 0x21}], 0x1}, 0x8010) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffd8f, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000000c00)=""/6, 0x2}], 0x2}, 0x2}], 0x2, 0x182d2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x69b0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000005e416ad00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r10}, 0x10) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') 1.131642349s ago: executing program 3 (id=1682): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d0000008500000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x17, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='net_dev_start_xmit\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r5, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9[\xbd\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96@ge\xec\xa7y\x1cd\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\"S\a\x04ry\x00#4\x87m\xf7\xff\xff\xff\xff\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14>v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb6\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8e\xb8\xd4Tz\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30x0}) sendto$packet(r11, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000040)=0xffffff7f, 0x4) ioctl$EVIOCGSW(r3, 0x80404531, &(0x7f0000000140)=""/4084) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="49d77cfce4d6ffbc16070000e15215cc5c9dc0e4a5cb2a42f594c2573245eef41d41e8bd9d5d0cb2db781b7c3114f394dca8f4ba2c7af8b928a6c3821281fa2c5efaad23bf4337a2bc6f87b005f1b25eb88735becc08a491886ea12c21c09000fb3a0a664568df55c6f8a4566bc0fbd8b58b6d91eb0c653b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000001180)=""/39) close(0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000000c0)="1163db8b5f6daa72ab8bc3297d111a87bb1b19243c582c8d71dcf6bb40611edf28aac3deb0e7d7d5053ad078056ba009a7e45a1fdcf19a82eb553e5dee6f196b320e53e48667c7aee32a540aa13e8d5eabf1921ec8ce64a1cddf985205892225ffa3650fa40b1a9b65c130c1", &(0x7f0000000140)=""/69, &(0x7f0000000280)="e444fd68fd1d5ae8b037a1048d5014cd6faae59f84f43ea14c048b3243477a5d8d4b28d1d932f0c924f244e42febf015ecbfff0bd063a0cdd64c3b52619d26706b06735f3a4b9ad8e3b5c467f9418766b38f8b36bed418df2be1d51c47147daab6ba1a130bf122876af2738d6d546b59ca308b344f9ba9f22f0a437c84c59567a4b66c97d1f0530dce4cf81bdc4cb0bd0d99fb7d189e1be18d767528b19a349ec4b1f08b3571ce8929bb23217e6990dfd783b814ddee9374a867b41c67e97c2794e03db13cf19c44ccba54541c7256b48a9502eac05189854dfe50a2d0aba45413162158e4e7d28557a1abcba08dded0bba0", &(0x7f00000001c0)="8483a36a398b624f506a9925804323e4d422e7faac206819df9ac7bd03ee624cbbda3f52e5b761eb5cd1", 0xd644, r2, 0x4}, 0x38) 785.074µs ago: executing program 2 (id=1684): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x29, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040090) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 2 (id=1685): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(0x0, 0x0) kernel console output (not intermixed with test programs): uetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.762310][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.903807][T10531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.926968][T10535] chnl_net:caif_netlink_parms(): no params data found [ 229.994962][T10541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.996616][T10541] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 230.014356][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.017479][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.020046][T10535] bridge_slave_0: entered allmulticast mode [ 230.022885][T10535] bridge_slave_0: entered promiscuous mode [ 230.027235][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.029164][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.031153][T10535] bridge_slave_1: entered allmulticast mode [ 230.033196][T10535] bridge_slave_1: entered promiscuous mode [ 230.058196][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.062345][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.093451][T10535] team0: Port device team_slave_0 added [ 230.099015][T10535] team0: Port device team_slave_1 added [ 230.137086][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.140079][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.150274][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.156675][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.159297][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.168585][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.212309][T10535] hsr_slave_0: entered promiscuous mode [ 230.214335][T10535] hsr_slave_1: entered promiscuous mode [ 230.216634][T10535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.218640][T10535] Cannot create hsr debugfs directory [ 230.418618][T10555] syzkaller0: entered allmulticast mode [ 231.754491][T10605] netlink: 'syz.2.1526': attribute type 4 has an invalid length. [ 232.061638][ T104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.272842][T10614] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1529'. [ 232.299523][ T104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.373463][ T104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.531882][ T104] bridge_slave_1: left allmulticast mode [ 232.533485][ T104] bridge_slave_1: left promiscuous mode [ 232.535982][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.543653][ T104] bridge_slave_0: left allmulticast mode [ 232.546695][ T104] bridge_slave_0: left promiscuous mode [ 232.548696][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.549406][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.849911][ T104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.853745][ T104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.857393][ T104] bond0 (unregistering): Released all slaves [ 233.014389][T10635] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1535'. [ 233.017898][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 233.151382][ T104] hsr_slave_0: left promiscuous mode [ 233.154011][ T104] hsr_slave_1: left promiscuous mode [ 233.156848][ T104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.158840][ T104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.163692][ T104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.167325][ T104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.197035][ T104] veth1_macvtap: left promiscuous mode [ 233.198658][ T104] veth0_macvtap: left promiscuous mode [ 233.200187][ T104] veth1_vlan: left promiscuous mode [ 233.201827][ T104] veth0_vlan: left promiscuous mode [ 233.854443][ T104] team0 (unregistering): Port device team_slave_1 removed [ 233.940501][ T104] team0 (unregistering): Port device team_slave_0 removed [ 234.533558][T10666] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1540'. [ 234.536736][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 234.576165][T10535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.582557][T10535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.601102][T10535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.610400][T10535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.677939][T10535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.687537][T10535] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.691891][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.693826][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.699430][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.701352][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.805915][T10535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.844760][T10535] veth0_vlan: entered promiscuous mode [ 234.859529][T10535] veth1_vlan: entered promiscuous mode [ 234.909289][T10535] veth0_macvtap: entered promiscuous mode [ 234.917698][T10535] veth1_macvtap: entered promiscuous mode [ 234.946967][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.949791][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.953089][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.955848][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.958541][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.961317][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.975694][T10535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.981077][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.981210][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 234.981283][ T39] audit: type=1326 audit(1731111919.581:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 234.983979][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.991327][ T39] audit: type=1326 audit(1731111919.591:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 234.993797][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.993808][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.993819][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.993825][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.000550][ T39] audit: type=1326 audit(1731111919.591:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.003708][T10535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.006456][ T39] audit: type=1326 audit(1731111919.591:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.015922][T10535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.017755][ T39] audit: type=1326 audit(1731111919.591:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.024755][T10535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.027402][ T39] audit: type=1326 audit(1731111919.591:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.029089][T10535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.035855][ T39] audit: type=1326 audit(1731111919.591:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.037475][T10535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.053657][ T39] audit: type=1326 audit(1731111919.601:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.060006][ T39] audit: type=1326 audit(1731111919.601:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.063497][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 235.083411][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.086698][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.091005][ T39] audit: type=1326 audit(1731111919.601:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10683 comm="syz.2.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 235.097610][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.102279][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.717849][T10683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.957834][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.386995][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 236.390308][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 236.603003][T10719] netlink: 'syz.3.1556': attribute type 2 has an invalid length. [ 236.608152][T10721] bond0: entered promiscuous mode [ 236.609554][T10721] bond_slave_0: entered promiscuous mode [ 236.611078][T10721] bond_slave_1: entered promiscuous mode [ 236.613050][T10721] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 236.619298][T10721] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 236.717999][T10720] bond0: left promiscuous mode [ 236.719605][T10720] bond_slave_0: left promiscuous mode [ 236.721136][T10720] bond_slave_1: left promiscuous mode [ 236.722583][T10720] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 237.475248][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.516849][T10736] block device autoloading is deprecated and will be removed. [ 237.747973][T10729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.963289][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.968328][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.973512][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.977692][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.980444][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.983809][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.990296][ T5304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.993046][ T5304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.996302][ T5304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.999443][ T5304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.002542][ T5304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 238.006535][ T5304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.082909][T10744] chnl_net:caif_netlink_parms(): no params data found [ 238.150370][T10744] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.152866][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.157588][T10744] bridge_slave_0: entered allmulticast mode [ 238.160082][T10744] bridge_slave_0: entered promiscuous mode [ 238.165224][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.167568][T10744] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.169403][T10744] bridge_slave_1: entered allmulticast mode [ 238.171366][T10744] bridge_slave_1: entered promiscuous mode [ 238.192558][T10744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.196371][T10744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.218036][T10744] team0: Port device team_slave_0 added [ 238.221074][T10744] team0: Port device team_slave_1 added [ 238.240444][T10744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.242295][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.249394][T10744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.253073][T10744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.255084][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.261644][T10744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.296290][T10744] hsr_slave_0: entered promiscuous mode [ 238.298716][T10744] hsr_slave_1: entered promiscuous mode [ 238.301284][T10744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.303610][T10744] Cannot create hsr debugfs directory [ 238.807953][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.228171][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.292749][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.360710][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.456119][ T1026] bridge_slave_1: left allmulticast mode [ 239.458232][ T1026] bridge_slave_1: left promiscuous mode [ 239.460391][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.466981][ T1026] bridge_slave_0: left allmulticast mode [ 239.469042][ T1026] bridge_slave_0: left promiscuous mode [ 239.471126][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.729199][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.733106][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.736863][ T1026] bond0 (unregistering): Released all slaves [ 240.015288][ T5954] Bluetooth: hci2: command tx timeout [ 240.101961][ T1026] hsr_slave_0: left promiscuous mode [ 240.107145][ T1026] hsr_slave_1: left promiscuous mode [ 240.109873][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.111996][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.118009][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.120394][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.158445][ T1026] veth1_macvtap: left promiscuous mode [ 240.160021][ T1026] veth0_macvtap: left promiscuous mode [ 240.161506][ T1026] veth1_vlan: left promiscuous mode [ 240.162911][ T1026] veth0_vlan: left promiscuous mode [ 240.199851][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 240.199928][ T39] audit: type=1326 audit(1731111924.801:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.208455][ T39] audit: type=1326 audit(1731111924.801:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.214673][ T39] audit: type=1326 audit(1731111924.801:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.222415][ T39] audit: type=1326 audit(1731111924.801:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.228892][ T39] audit: type=1326 audit(1731111924.801:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.234737][ T39] audit: type=1326 audit(1731111924.801:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.242072][ T39] audit: type=1326 audit(1731111924.801:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.249177][ T39] audit: type=1326 audit(1731111924.801:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.255792][ T39] audit: type=1326 audit(1731111924.801:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.261517][ T39] audit: type=1326 audit(1731111924.801:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.2.1573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 240.850654][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.037247][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 241.108688][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 241.634152][ T5304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.646122][ T5304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.667144][ T5304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.680791][ T5304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.694345][ T5304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.699098][ T5304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.778341][T10744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.794750][T10744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.849895][T10744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.855444][T10744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.919575][T10807] chnl_net:caif_netlink_parms(): no params data found [ 242.095463][ T5954] Bluetooth: hci2: command tx timeout [ 242.271209][T10807] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.273755][T10807] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.276739][T10807] bridge_slave_0: entered allmulticast mode [ 242.279636][T10807] bridge_slave_0: entered promiscuous mode [ 242.283474][T10807] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.286218][T10807] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.288756][T10807] bridge_slave_1: entered allmulticast mode [ 242.291609][T10807] bridge_slave_1: entered promiscuous mode [ 242.323341][T10744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.329958][T10807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.340898][T10807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.391275][T10807] team0: Port device team_slave_0 added [ 242.395717][T10807] team0: Port device team_slave_1 added [ 242.399315][T10744] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.428601][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.431003][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.437223][T10804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.455559][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.458007][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.628649][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.633231][T10814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.649672][T10807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.651338][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.657475][T10807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.662567][T10807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.666020][T10807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.674771][T10807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.711856][T10807] hsr_slave_0: entered promiscuous mode [ 242.713781][T10807] hsr_slave_1: entered promiscuous mode [ 242.715803][T10807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.717777][T10807] Cannot create hsr debugfs directory [ 242.736667][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.805780][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.827540][T10744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.842692][T10744] veth0_vlan: entered promiscuous mode [ 242.846899][T10744] veth1_vlan: entered promiscuous mode [ 242.858107][T10744] veth0_macvtap: entered promiscuous mode [ 242.861063][T10744] veth1_macvtap: entered promiscuous mode [ 242.879158][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.885611][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.888331][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.890818][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.893574][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.896276][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.898955][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.902154][T10744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.906780][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.909501][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.911990][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.914643][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.917845][T10744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.920584][T10744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.923752][T10744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.927971][T10744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.930229][T10744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.932458][T10744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.934712][T10744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.972475][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.974511][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.996157][ T1026] bridge_slave_1: left allmulticast mode [ 242.997691][ T1026] bridge_slave_1: left promiscuous mode [ 242.999226][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.002468][ T1026] bridge_slave_0: left allmulticast mode [ 243.003955][ T1026] bridge_slave_0: left promiscuous mode [ 243.013893][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.281040][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.284729][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.289168][ T1026] bond0 (unregistering): Released all slaves [ 243.305152][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 243.320151][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.325079][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.618001][ T1026] hsr_slave_0: left promiscuous mode [ 243.619946][ T1026] hsr_slave_1: left promiscuous mode [ 243.622409][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.624778][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.627595][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.629571][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.663460][ T1026] veth1_macvtap: left promiscuous mode [ 243.665370][ T1026] veth0_macvtap: left promiscuous mode [ 243.666843][ T1026] veth1_vlan: left promiscuous mode [ 243.668260][ T1026] veth0_vlan: left promiscuous mode [ 243.786524][ T5954] Bluetooth: hci4: command tx timeout [ 244.312866][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 244.387065][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 244.812200][T10877] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 244.830882][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.839185][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.841899][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.847553][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.853234][ T5304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.856562][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.085022][T10807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.095515][T10807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.108478][T10807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.117769][T10807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.120700][T10880] chnl_net:caif_netlink_parms(): no params data found [ 245.186449][T10880] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.188315][T10880] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.190121][T10880] bridge_slave_0: entered allmulticast mode [ 245.192239][T10880] bridge_slave_0: entered promiscuous mode [ 245.198080][T10880] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.200684][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.202570][T10880] bridge_slave_1: entered allmulticast mode [ 245.204634][T10880] bridge_slave_1: entered promiscuous mode [ 245.257302][T10880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.266666][T10880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.286913][T10880] team0: Port device team_slave_0 added [ 245.290159][T10880] team0: Port device team_slave_1 added [ 245.308787][T10880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.310618][T10880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.325444][T10880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.331850][T10807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.333902][T10880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.338865][T10880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.348124][T10880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.380187][T10880] hsr_slave_0: entered promiscuous mode [ 245.382191][T10880] hsr_slave_1: entered promiscuous mode [ 245.383942][T10880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.386795][T10880] Cannot create hsr debugfs directory [ 245.400027][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 245.404386][T10807] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.439045][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.440929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.452803][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.454695][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.512442][T10880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.598509][T10807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.614737][T10807] veth0_vlan: entered promiscuous mode [ 245.619579][T10807] veth1_vlan: entered promiscuous mode [ 245.629058][T10807] veth0_macvtap: entered promiscuous mode [ 245.632068][T10807] veth1_macvtap: entered promiscuous mode [ 245.647055][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.649786][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.657800][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.660499][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.663049][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.668238][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.671506][T10807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.680722][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.683429][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.686949][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.689726][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.692284][T10807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.695404][T10807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.699031][T10807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.703295][T10807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.709075][T10807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.711556][T10807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.713803][T10807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.753658][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.756042][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.767942][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.770237][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.854975][T10936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.487702][T10880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.615205][T10951] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 246.628570][T10951] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 246.668397][T10951] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 246.672253][T10951] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 246.678354][T10951] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 246.712354][T10951] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 246.859948][T10880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.975042][ T5954] Bluetooth: hci0: command tx timeout [ 246.986714][T10880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.073783][ T1026] bridge_slave_1: left allmulticast mode [ 247.075399][ T1026] bridge_slave_1: left promiscuous mode [ 247.077065][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.083208][ T1026] bridge_slave_0: left allmulticast mode [ 247.085057][ T1026] bridge_slave_0: left promiscuous mode [ 247.086594][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.380046][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.384153][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.388475][ T1026] bond0 (unregistering): Released all slaves [ 247.468249][T10880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.487824][T10880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.500545][T10880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.527442][T10880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.572763][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 247.572775][ T39] audit: type=1326 audit(1731111932.171:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.580918][ T39] audit: type=1326 audit(1731111932.171:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.586742][ T39] audit: type=1326 audit(1731111932.181:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.592251][ T39] audit: type=1326 audit(1731111932.181:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.598287][ T39] audit: type=1326 audit(1731111932.191:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.603806][ T39] audit: type=1326 audit(1731111932.201:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.609552][ T39] audit: type=1326 audit(1731111932.201:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.615218][ T39] audit: type=1326 audit(1731111932.201:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.622959][ T39] audit: type=1326 audit(1731111932.201:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.628809][ T39] audit: type=1326 audit(1731111932.201:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="syz.2.1608" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 247.715473][T10880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.732922][T10880] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.754317][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.756772][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.770630][ T1026] hsr_slave_0: left promiscuous mode [ 247.774619][ T1026] hsr_slave_1: left promiscuous mode [ 247.778881][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.781166][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.795128][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.797106][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.815061][ T1026] veth1_macvtap: left promiscuous mode [ 247.816555][ T1026] veth0_macvtap: left promiscuous mode [ 247.818048][ T1026] veth1_vlan: left promiscuous mode [ 247.819450][ T1026] veth0_vlan: left promiscuous mode [ 248.176216][T10972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.670239][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 248.754103][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 249.039070][ T5304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.044915][ T5989] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 249.054408][ T5304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.055367][ T5960] Bluetooth: hci0: command tx timeout [ 249.060428][ T5304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.066079][ T5304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.068917][ T5304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.071677][ T5304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.197421][ T5989] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.199691][ T5989] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 249.203278][ T5989] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.205560][ T5989] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 249.208306][ T5989] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 249.212462][ T5989] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.215487][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 249.217584][ T5989] usb 8-1: Product: syz [ 249.218694][ T5989] usb 8-1: Manufacturer: syz [ 249.225210][ T5989] cdc_wdm 8-1:1.0: skipping garbage [ 249.226658][ T5989] cdc_wdm 8-1:1.0: skipping garbage [ 249.228512][ T5989] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 249.230614][ T5989] cdc_wdm 8-1:1.0: Unknown control protocol [ 249.409421][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.411405][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.553707][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 249.553734][ T35] usb 8-1: USB disconnect, device number 27 [ 249.555565][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 249.559029][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 249.561895][T10979] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 249.627352][T10980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.652110][T10985] chnl_net:caif_netlink_parms(): no params data found [ 249.695294][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.697193][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.699151][T10985] bridge_slave_0: entered allmulticast mode [ 249.701165][T10985] bridge_slave_0: entered promiscuous mode [ 249.703899][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.705892][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.707742][T10985] bridge_slave_1: entered allmulticast mode [ 249.709733][T10985] bridge_slave_1: entered promiscuous mode [ 249.730632][T10880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.736521][T10985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.741163][T10985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.768867][T10985] team0: Port device team_slave_0 added [ 249.771557][T10985] team0: Port device team_slave_1 added [ 249.797414][T10985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.799257][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.806585][T10985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.810216][T10985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.812002][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.818826][T10985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.846107][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.873601][T10880] veth0_vlan: entered promiscuous mode [ 249.877790][T10985] hsr_slave_0: entered promiscuous mode [ 249.879917][T10985] hsr_slave_1: entered promiscuous mode [ 249.881489][T10985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.883253][T10985] Cannot create hsr debugfs directory [ 249.899904][T10880] veth1_vlan: entered promiscuous mode [ 249.911169][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.972982][T10880] veth0_macvtap: entered promiscuous mode [ 249.976977][T10880] veth1_macvtap: entered promiscuous mode [ 249.987024][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.996399][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.999316][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.001727][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.004596][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.008060][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.011255][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.014558][T10880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.019083][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.021993][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.024692][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.027818][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.030477][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.033317][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.036707][T10880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.051570][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.059201][T10880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.062289][T10880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.065431][T10880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.067678][T10880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.094187][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.096407][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.109459][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.111510][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.200300][ T1026] bridge_slave_1: left allmulticast mode [ 250.202353][ T1026] bridge_slave_1: left promiscuous mode [ 250.204927][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.210768][ T1026] bridge_slave_0: left allmulticast mode [ 250.212266][ T1026] bridge_slave_0: left promiscuous mode [ 250.213795][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.234252][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 250.238281][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 250.241201][T11008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1612'. [ 250.294458][ T5954] block nbd0: Receive control failed (result -107) [ 250.481017][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.485067][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.488674][ T1026] bond0 (unregistering): Released all slaves [ 250.518103][T11012] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 250.544762][T11012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.558216][T11013] bond1: (slave bridge2): making interface the new active one [ 250.563713][T11013] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 250.568345][T11016] vlan2: entered promiscuous mode [ 250.572242][T11016] bond1: entered promiscuous mode [ 250.573674][T11016] bridge2: entered promiscuous mode [ 250.576094][T11016] vlan2: entered allmulticast mode [ 250.577513][T11016] bond1: entered allmulticast mode [ 250.578931][T11016] bridge2: entered allmulticast mode [ 250.926874][ T1026] hsr_slave_0: left promiscuous mode [ 250.930577][ T1026] hsr_slave_1: left promiscuous mode [ 250.932428][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.934352][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.936700][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.938627][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.960310][ T1026] veth1_macvtap: left promiscuous mode [ 250.961826][ T1026] veth0_macvtap: left promiscuous mode [ 250.963283][ T1026] veth1_vlan: left promiscuous mode [ 250.964697][ T1026] veth0_vlan: left promiscuous mode [ 251.149163][ T5954] Bluetooth: hci2: command tx timeout [ 251.304162][T11022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.601048][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.615000][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.624228][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.637117][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.646608][ T5304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.663632][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.681803][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 251.757397][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 252.301447][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1619'. [ 252.330034][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 252.337299][T11062] team1: Mode changed to "random" [ 252.423769][T10985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.434456][T10985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.448107][T10985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.452052][T10985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.512429][T10985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.518248][T11055] chnl_net:caif_netlink_parms(): no params data found [ 252.543108][T10985] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.556845][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.559373][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.583557][T10985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.589443][T10985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.597496][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.599300][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.633454][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.639488][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.641422][T11055] bridge_slave_0: entered allmulticast mode [ 252.643429][T11055] bridge_slave_0: entered promiscuous mode [ 252.646668][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.648630][T11055] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.650481][T11055] bridge_slave_1: entered allmulticast mode [ 252.652433][T11055] bridge_slave_1: entered promiscuous mode [ 252.677789][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.684372][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.710193][T11055] team0: Port device team_slave_0 added [ 252.714295][T11055] team0: Port device team_slave_1 added [ 252.734130][T10985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.756521][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.769605][T11055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.771398][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.778062][T11055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.782654][T11055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.784461][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.791929][T11055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.829176][T11055] hsr_slave_0: entered promiscuous mode [ 252.831518][T11055] hsr_slave_1: entered promiscuous mode [ 252.833549][T11055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.838014][T11055] Cannot create hsr debugfs directory [ 252.919385][T10985] veth0_vlan: entered promiscuous mode [ 252.928173][T10985] veth1_vlan: entered promiscuous mode [ 252.949168][T10985] veth0_macvtap: entered promiscuous mode [ 252.952133][T10985] veth1_macvtap: entered promiscuous mode [ 252.958847][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.962162][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.966485][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.970003][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.973395][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.977112][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.981723][T10985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.992752][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.996706][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.000260][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.003932][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.008773][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.012386][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.017718][T10985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.023355][T10985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.027056][T10985] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.030244][T10985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.033396][T10985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.063111][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.067578][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.075539][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.077591][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.295126][ T6120] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 253.456893][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.459775][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.462264][ T6120] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.466167][ T6120] usb 7-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 253.469223][ T6120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.472252][ T6120] usb 7-1: config 0 descriptor?? [ 253.475022][T11088] nbd3: detected capacity change from 0 to 20 [ 253.479846][T10514] block nbd3: Send control failed (result -89) [ 253.482024][T10514] block nbd3: Request send failed, requeueing [ 253.488847][ T5954] block nbd3: Receive control failed (result -32) [ 253.489322][ T54] block nbd3: Dead connection, failed to find a fallback [ 253.493622][ T54] block nbd3: shutting down sockets [ 253.496158][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.499356][ T54] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.509270][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.511860][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.512273][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.518453][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.521470][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.524136][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.527367][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.530167][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.533300][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.536349][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.539354][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.541950][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.545014][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.547098][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.549471][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.551507][T10514] ldm_validate_partition_table(): Disk read failed. [ 253.553275][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.556078][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.558163][T10514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.560548][T10514] Buffer I/O error on dev nbd3, logical block 0, async page read [ 253.563660][T10514] Dev nbd3: unable to read RDB block 0 [ 253.565311][T10514] nbd3: unable to read partition table [ 253.566841][T10514] nbd3: partition table beyond EOD, truncated [ 253.572526][T11088] ldm_validate_partition_table(): Disk read failed. [ 253.574701][T11088] Dev nbd3: unable to read RDB block 0 [ 253.576524][T11088] nbd3: unable to read partition table [ 253.578081][T11088] nbd3: partition table beyond EOD, truncated [ 253.582285][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 253.585662][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 253.586377][T10514] ldm_validate_partition_table(): Disk read failed. [ 253.588522][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 253.590244][T10514] Dev nbd3: unable to read RDB block 0 [ 253.593444][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 253.594461][T10514] nbd3: unable to read partition table [ 253.596445][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 253.597540][T10514] nbd3: partition table beyond EOD, truncated [ 253.600725][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 253.604220][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 253.607163][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 253.609700][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 253.612585][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 253.615795][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 253.618465][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 253.620952][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 253.623365][T11088] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 253.627016][T11088] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 253.629353][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.698203][ T5954] Bluetooth: hci0: command tx timeout [ 253.700748][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.793071][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 253.793138][ T39] audit: type=1326 audit(1731111938.391:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.808621][ T1026] bridge_slave_1: left allmulticast mode [ 253.810186][ T1026] bridge_slave_1: left promiscuous mode [ 253.812208][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.815319][ T39] audit: type=1326 audit(1731111938.391:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.821712][ T1026] bridge_slave_0: left allmulticast mode [ 253.823455][ T1026] bridge_slave_0: left promiscuous mode [ 253.826042][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.835303][ T39] audit: type=1326 audit(1731111938.421:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.844073][ T39] audit: type=1326 audit(1731111938.421:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.850292][ T39] audit: type=1326 audit(1731111938.421:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.856824][ T39] audit: type=1326 audit(1731111938.421:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.862299][ T39] audit: type=1326 audit(1731111938.421:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.867702][ T39] audit: type=1326 audit(1731111938.421:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.872861][ T39] audit: type=1326 audit(1731111938.431:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.878215][ T39] audit: type=1326 audit(1731111938.431:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.3.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 253.891252][ T6120] usbhid 7-1:0.0: can't add hid device: -71 [ 253.892820][ T6120] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 253.895639][ T6120] usb 7-1: USB disconnect, device number 22 [ 254.163422][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.167760][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.171609][ T1026] bond0 (unregistering): Released all slaves [ 254.483860][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.642590][T11112] netlink: 'syz.2.1629': attribute type 10 has an invalid length. [ 254.657017][ T1026] hsr_slave_0: left promiscuous mode [ 254.658898][ T1026] hsr_slave_1: left promiscuous mode [ 254.661189][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.663106][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.666176][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.668098][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.688389][ T1026] veth1_macvtap: left promiscuous mode [ 254.689867][ T1026] veth0_macvtap: left promiscuous mode [ 254.691322][ T1026] veth1_vlan: left promiscuous mode [ 254.692688][ T1026] veth0_vlan: left promiscuous mode [ 254.977800][ T1407] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.984614][ T1407] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.427115][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 255.517795][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 255.785412][ T5954] Bluetooth: hci0: command tx timeout [ 256.113959][T11055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.117001][T11055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.121517][T11055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.134587][T11055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.182336][T11055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.193127][T11055] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.199311][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.201160][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.206635][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.208878][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.300795][T11055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.315601][T11055] veth0_vlan: entered promiscuous mode [ 256.322405][T11055] veth1_vlan: entered promiscuous mode [ 256.335238][T11055] veth0_macvtap: entered promiscuous mode [ 256.338339][T11055] veth1_macvtap: entered promiscuous mode [ 256.343987][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.347792][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.350315][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.352957][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.357136][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.359890][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.366414][T11055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.382774][T11146] syzkaller0: entered promiscuous mode [ 256.384331][T11146] syzkaller0: entered allmulticast mode [ 256.391566][ T5304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.393270][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.397329][ T5304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.398861][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.401847][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.402057][ T5304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.404506][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.404520][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.409140][ T5304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.411713][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.414280][ T5304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.417625][T11055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.419711][ T5304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.426269][T11055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.428582][T11055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.430803][T11055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.433030][T11055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.735241][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.760050][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.762100][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.771748][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.773821][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.842355][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.861550][T11147] chnl_net:caif_netlink_parms(): no params data found [ 257.925194][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.930023][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.931944][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.933820][T11147] bridge_slave_0: entered allmulticast mode [ 257.936158][T11147] bridge_slave_0: entered promiscuous mode [ 257.938698][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.941022][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.943497][T11147] bridge_slave_1: entered allmulticast mode [ 257.946464][T11147] bridge_slave_1: entered promiscuous mode [ 257.976304][T11147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.981864][T11147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.027597][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.034726][T11147] team0: Port device team_slave_0 added [ 258.038177][T11147] team0: Port device team_slave_1 added [ 258.056883][T11147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.058785][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.065720][T11147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.069444][T11147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.071220][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.078294][T11147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.126708][T11147] hsr_slave_0: entered promiscuous mode [ 258.129334][T11147] hsr_slave_1: entered promiscuous mode [ 258.131182][T11147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.133207][T11147] Cannot create hsr debugfs directory [ 258.172327][ T1026] bridge_slave_1: left allmulticast mode [ 258.173798][ T1026] bridge_slave_1: left promiscuous mode [ 258.176674][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.182117][ T1026] bridge_slave_0: left allmulticast mode [ 258.183588][ T1026] bridge_slave_0: left promiscuous mode [ 258.186420][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.237435][T11166] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1637'. [ 258.239882][T11166] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 258.495861][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.505884][ T5954] Bluetooth: hci2: command tx timeout [ 258.513060][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.529308][ T1026] bond0 (unregistering): Released all slaves [ 259.098443][ T1026] hsr_slave_0: left promiscuous mode [ 259.100181][T11169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.102831][ T1026] hsr_slave_1: left promiscuous mode [ 259.104648][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.106859][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.109758][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.112506][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.133112][ T1026] veth1_macvtap: left promiscuous mode [ 259.134597][ T1026] veth0_macvtap: left promiscuous mode [ 259.136448][ T1026] veth1_vlan: left promiscuous mode [ 259.138385][ T1026] veth0_vlan: left promiscuous mode [ 259.814617][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 259.891417][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 260.038390][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.054004][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.062060][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.072784][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.075161][ T5304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.079828][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.236500][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 260.236511][ T39] audit: type=1326 audit(1731111944.841:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.244465][ T39] audit: type=1326 audit(1731111944.841:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.250268][ T39] audit: type=1326 audit(1731111944.841:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.256781][ T39] audit: type=1326 audit(1731111944.851:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.262061][ T39] audit: type=1326 audit(1731111944.851:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.269625][ T39] audit: type=1326 audit(1731111944.851:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.275033][ T39] audit: type=1326 audit(1731111944.851:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.280412][ T39] audit: type=1326 audit(1731111944.851:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.290475][ T39] audit: type=1326 audit(1731111944.851:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.296238][ T39] audit: type=1326 audit(1731111944.851:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.2.1643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 260.585498][ T5954] Bluetooth: hci2: command tx timeout [ 260.683529][T11147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.689703][T11147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.693343][T11147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.696818][T11147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.798949][T11199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.802796][T11197] chnl_net:caif_netlink_parms(): no params data found [ 260.898291][T11197] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.900542][T11197] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.902550][T11197] bridge_slave_0: entered allmulticast mode [ 260.904875][T11197] bridge_slave_0: entered promiscuous mode [ 260.908423][T11197] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.910667][T11197] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.912636][T11197] bridge_slave_1: entered allmulticast mode [ 260.915663][T11197] bridge_slave_1: entered promiscuous mode [ 260.933465][T11147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.946770][T11197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.950784][T11197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.967871][T11147] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.976897][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.978807][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.981418][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.983266][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.002615][T11197] team0: Port device team_slave_0 added [ 261.013066][T11197] team0: Port device team_slave_1 added [ 261.035390][T11197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.037373][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.044052][T11197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.049689][T11197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.051607][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.058558][T11197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.092227][T11197] hsr_slave_0: entered promiscuous mode [ 261.094178][T11197] hsr_slave_1: entered promiscuous mode [ 261.096048][T11197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.098025][T11197] Cannot create hsr debugfs directory [ 261.135339][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.182442][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.197900][T11147] veth0_vlan: entered promiscuous mode [ 261.211617][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.217527][T11147] veth1_vlan: entered promiscuous mode [ 261.228416][T11147] veth0_macvtap: entered promiscuous mode [ 261.231674][T11147] veth1_macvtap: entered promiscuous mode [ 261.238608][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.241430][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.243936][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.246966][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.249361][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.251930][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.255135][T11147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.259646][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.262296][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.264768][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.267687][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.270116][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.272768][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.276005][T11147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.295560][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.301443][T11147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.303726][T11147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.306505][T11147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.308770][T11147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.337436][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.339501][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.351235][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.353326][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.372133][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.467817][ T1026] bridge_slave_1: left allmulticast mode [ 261.469400][ T1026] bridge_slave_1: left promiscuous mode [ 261.471370][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.475985][ T1026] bridge_slave_0: left allmulticast mode [ 261.478012][ T1026] bridge_slave_0: left promiscuous mode [ 261.480061][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.631500][T11244] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 261.633508][T11244] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.638250][T11244] vhci_hcd vhci_hcd.0: Device attached [ 261.699401][T11247] vhci_hcd: connection closed [ 261.702682][ T104] vhci_hcd: stop threads [ 261.705706][ T104] vhci_hcd: release socket [ 261.706899][ T104] vhci_hcd: disconnect device [ 261.830735][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.834513][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.838239][ T1026] bond0 (unregistering): Released all slaves [ 262.175248][ T5954] Bluetooth: hci0: command tx timeout [ 262.243002][ T1026] hsr_slave_0: left promiscuous mode [ 262.246496][ T1026] hsr_slave_1: left promiscuous mode [ 262.249100][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.251126][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.254135][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.258561][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.284766][ T1026] veth1_macvtap: left promiscuous mode [ 262.288278][ T1026] veth0_macvtap: left promiscuous mode [ 262.290462][ T1026] veth1_vlan: left promiscuous mode [ 262.291921][ T1026] veth0_vlan: left promiscuous mode [ 263.006533][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 263.059955][T11269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.085061][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 263.718601][T11197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.734569][T11197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.739929][T11197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.743598][T11197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.796447][T11197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.808621][T11197] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.812587][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.814509][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.821935][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.823820][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.929766][T11197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.946512][T11197] veth0_vlan: entered promiscuous mode [ 263.950632][T11197] veth1_vlan: entered promiscuous mode [ 263.973679][T11197] veth0_macvtap: entered promiscuous mode [ 263.980362][T11197] veth1_macvtap: entered promiscuous mode [ 263.986905][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.989649][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.992191][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.995489][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.998070][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.002629][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.006414][T11197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.010661][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.013933][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.016997][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.019666][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.022165][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.024875][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.028429][T11197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.032955][T11197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.035870][T11197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.038457][T11197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.040594][T11197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.067517][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.069619][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.076573][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.078825][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.234981][ T25] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 264.257183][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.396513][ T25] usb 7-1: config 1 interface 0 has no altsetting 0 [ 264.400211][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 264.403050][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.405552][ T25] usb 7-1: Product: syz [ 264.406727][ T25] usb 7-1: Manufacturer: syz [ 264.408327][ T25] usb 7-1: SerialNumber: syz [ 265.016412][ T25] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 265.425583][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.429398][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.431945][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.438374][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.440896][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 265.440946][ T5304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 265.444929][ T39] audit: type=1326 audit(1731111950.041:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.450652][ T39] audit: type=1326 audit(1731111950.041:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.456516][ T39] audit: type=1326 audit(1731111950.041:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.457786][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.462740][ T39] audit: type=1326 audit(1731111950.041:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.462758][ T39] audit: type=1326 audit(1731111950.041:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.462773][ T39] audit: type=1326 audit(1731111950.041:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.462790][ T39] audit: type=1326 audit(1731111950.041:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.487601][ T39] audit: type=1326 audit(1731111950.041:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.493161][ T39] audit: type=1326 audit(1731111950.041:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.498812][ T39] audit: type=1326 audit(1731111950.041:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.1653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 265.569057][ T35] usb 7-1: USB disconnect, device number 23 [ 265.569230][ C2] usblp0: nonzero write bulk status received: -71 [ 265.580110][T11297] usblp0: removed [ 265.591968][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.690324][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.776501][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.900103][T11307] chnl_net:caif_netlink_parms(): no params data found [ 266.006046][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.007933][T11307] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.009821][T11307] bridge_slave_0: entered allmulticast mode [ 266.011914][T11307] bridge_slave_0: entered promiscuous mode [ 266.021906][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.024393][T11307] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.027057][T11307] bridge_slave_1: entered allmulticast mode [ 266.029513][T11307] bridge_slave_1: entered promiscuous mode [ 266.039732][ T1026] bridge_slave_1: left allmulticast mode [ 266.041251][ T1026] bridge_slave_1: left promiscuous mode [ 266.042749][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.048990][ T1026] bridge_slave_0: left allmulticast mode [ 266.050468][ T1026] bridge_slave_0: left promiscuous mode [ 266.051963][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.122620][T11303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.368199][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.372069][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.375717][ T1026] bond0 (unregistering): Released all slaves [ 266.389866][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.393355][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.452427][T11307] team0: Port device team_slave_0 added [ 266.477397][T11307] team0: Port device team_slave_1 added [ 266.522252][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.524602][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.534914][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.538522][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.540390][T11316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.541938][T11316] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 266.543976][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.551909][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.608798][T11307] hsr_slave_0: entered promiscuous mode [ 266.611377][T11307] hsr_slave_1: entered promiscuous mode [ 266.614514][T11307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.617149][T11307] Cannot create hsr debugfs directory [ 266.698247][ T1026] hsr_slave_0: left promiscuous mode [ 266.705128][ T1026] hsr_slave_1: left promiscuous mode [ 266.707010][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.708922][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.711038][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.712927][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.733273][ T1026] veth1_macvtap: left promiscuous mode [ 266.734651][ T1026] veth0_macvtap: left promiscuous mode [ 266.737009][ T1026] veth1_vlan: left promiscuous mode [ 266.738443][ T1026] veth0_vlan: left promiscuous mode [ 267.426829][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 267.509320][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 267.602237][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.627216][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.636371][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.639616][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.647791][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.650583][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.707789][ T5304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.713175][ T5304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.724097][ T5304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.730528][ T5304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.733126][ T5304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.736332][ T5304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.429497][T11334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.488115][T11333] chnl_net:caif_netlink_parms(): no params data found [ 268.556899][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.558765][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.560627][T11333] bridge_slave_0: entered allmulticast mode [ 268.562566][T11333] bridge_slave_0: entered promiscuous mode [ 268.568163][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.570056][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.571934][T11333] bridge_slave_1: entered allmulticast mode [ 268.573896][T11333] bridge_slave_1: entered promiscuous mode [ 268.592352][T11333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.603340][T11333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.633173][T11333] team0: Port device team_slave_0 added [ 268.639527][T11333] team0: Port device team_slave_1 added [ 268.659332][T11333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.661150][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.671819][T11333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.675559][T11333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.677384][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.684063][T11333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.705598][T11333] hsr_slave_0: entered promiscuous mode [ 268.707445][T11333] hsr_slave_1: entered promiscuous mode [ 268.709219][T11333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.711190][T11333] Cannot create hsr debugfs directory [ 268.853420][T11307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.876578][T11333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.883945][T11307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.894658][T11307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.901340][T11307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.932811][T11333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.954266][T11307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.994102][T11307] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.000446][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.002324][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.009354][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.011222][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.028366][T11333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.118490][T11333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.132690][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.150939][T11307] veth0_vlan: entered promiscuous mode [ 269.155687][T11307] veth1_vlan: entered promiscuous mode [ 269.170259][T11307] veth0_macvtap: entered promiscuous mode [ 269.173747][T11307] veth1_macvtap: entered promiscuous mode [ 269.178974][ T1026] bridge_slave_1: left allmulticast mode [ 269.180550][ T1026] bridge_slave_1: left promiscuous mode [ 269.182119][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.185954][ T1026] bridge_slave_0: left allmulticast mode [ 269.187440][ T1026] bridge_slave_0: left promiscuous mode [ 269.191225][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.472902][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.477749][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.481389][ T1026] bond0 (unregistering): Released all slaves [ 269.500862][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.503571][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.506305][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.508943][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.511405][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.513982][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.517262][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.522275][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.525122][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.527614][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.530412][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.532913][T11307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.535668][T11307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.545375][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.571357][T11307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.573724][T11307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.585483][T11307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.587791][T11307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.611955][T11333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.615679][T11333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.618887][T11333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.623005][T11333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.684668][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.692412][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.705141][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.707587][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.708718][T11333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.719893][T11333] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.728095][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.730019][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.758590][ T1026] hsr_slave_0: left promiscuous mode [ 269.761448][ T1026] hsr_slave_1: left promiscuous mode [ 269.764453][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.766707][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.770640][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.772568][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.785031][ T5304] Bluetooth: hci2: command tx timeout [ 269.802678][ T1026] veth1_macvtap: left promiscuous mode [ 269.804198][ T1026] veth0_macvtap: left promiscuous mode [ 269.806329][ T1026] veth1_vlan: left promiscuous mode [ 269.807819][ T1026] veth0_vlan: left promiscuous mode [ 270.844317][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 270.887528][T11380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.962202][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 271.857370][ T5304] Bluetooth: hci2: command tx timeout [ 271.897937][T11333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.901628][T11333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.909439][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.911365][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.926084][T11377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.928232][T11377] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 272.050070][T11333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.076818][T11333] veth0_vlan: entered promiscuous mode [ 272.080835][T11333] veth1_vlan: entered promiscuous mode [ 272.093470][T11333] veth0_macvtap: entered promiscuous mode [ 272.101520][T11333] veth1_macvtap: entered promiscuous mode [ 272.118285][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.122114][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.131072][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.135925][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.139523][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.143282][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.154736][T11333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.160009][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.162709][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.168113][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.170913][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.173443][T11333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.176991][T11333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.189853][T11333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.193712][T11333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.194437][ T39] kauditd_printk_skb: 22 callbacks suppressed [ 272.194520][ T39] audit: type=1326 audit(1731111956.791:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.196392][T11333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.198792][ T39] audit: type=1326 audit(1731111956.791:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.203913][T11333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.207041][ T39] audit: type=1326 audit(1731111956.801:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.207095][ T39] audit: type=1326 audit(1731111956.801:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.207170][ T39] audit: type=1326 audit(1731111956.801:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.207248][ T39] audit: type=1326 audit(1731111956.801:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.216327][T11333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.224232][ T39] audit: type=1326 audit(1731111956.801:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.256705][ T39] audit: type=1326 audit(1731111956.801:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.264736][ T39] audit: type=1326 audit(1731111956.801:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.274606][ T39] audit: type=1326 audit(1731111956.801:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 272.293563][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.315584][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.355824][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.358046][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.481904][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.602444][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.821461][T11386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.003867][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.288191][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.298981][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.301712][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.306480][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.310374][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.312572][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.314546][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.376659][T11395] chnl_net:caif_netlink_parms(): no params data found [ 273.421987][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.423882][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.426433][T11395] bridge_slave_0: entered allmulticast mode [ 273.428448][T11395] bridge_slave_0: entered promiscuous mode [ 273.431015][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.432887][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.434747][T11395] bridge_slave_1: entered allmulticast mode [ 273.436847][T11395] bridge_slave_1: entered promiscuous mode [ 273.458282][T11395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.463898][T11395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.490155][T11395] team0: Port device team_slave_0 added [ 273.492777][T11395] team0: Port device team_slave_1 added [ 273.512536][T11395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.514366][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.521377][T11395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.525018][T11395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.526801][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.533398][T11395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.558363][T11395] hsr_slave_0: entered promiscuous mode [ 273.560395][T11395] hsr_slave_1: entered promiscuous mode [ 273.562173][T11395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.564123][T11395] Cannot create hsr debugfs directory [ 273.784213][ T1026] bridge_slave_1: left allmulticast mode [ 273.786336][ T1026] bridge_slave_1: left promiscuous mode [ 273.788273][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.791108][ T1026] bridge_slave_0: left allmulticast mode [ 273.792607][ T1026] bridge_slave_0: left promiscuous mode [ 273.794121][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.076010][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.081266][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.086647][ T1026] bond0 (unregistering): Released all slaves [ 274.152470][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 274.157236][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 274.204121][ T5304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.211862][ T5304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.216360][ T5304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.219444][ T5304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.222964][ T5304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.228222][ T5304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.521113][ T1026] hsr_slave_0: left promiscuous mode [ 274.523406][ T1026] hsr_slave_1: left promiscuous mode [ 274.527634][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.529607][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.533534][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.536142][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.570949][ T1026] veth1_macvtap: left promiscuous mode [ 274.572489][ T1026] veth0_macvtap: left promiscuous mode [ 274.573944][ T1026] veth1_vlan: left promiscuous mode [ 274.575667][ T1026] veth0_vlan: left promiscuous mode [ 275.229468][T11421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.380061][ T5954] Bluetooth: hci0: command tx timeout [ 275.394175][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 275.486428][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 276.036328][T11429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.102950][T11414] chnl_net:caif_netlink_parms(): no params data found [ 276.169216][T11434] tipc: Started in network mode [ 276.170547][T11434] tipc: Node identity 1, cluster identity 4711 [ 276.172306][T11434] tipc: Node number set to 1 [ 276.202027][T11395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.212088][T11395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.228721][T11395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.232386][T11395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.238420][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.240644][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.242939][T11414] bridge_slave_0: entered allmulticast mode [ 276.255312][ T5954] Bluetooth: hci2: command tx timeout [ 276.255860][T11414] bridge_slave_0: entered promiscuous mode [ 276.261434][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.263500][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.266170][T11414] bridge_slave_1: entered allmulticast mode [ 276.268535][T11414] bridge_slave_1: entered promiscuous mode [ 276.312058][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.318921][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.359694][T11414] team0: Port device team_slave_0 added [ 276.365563][T11414] team0: Port device team_slave_1 added [ 276.406484][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.408369][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.415455][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.419519][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.421407][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.431090][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.457384][T11395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.470670][T11414] hsr_slave_0: entered promiscuous mode [ 276.472719][T11414] hsr_slave_1: entered promiscuous mode [ 276.475148][T11414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.477074][T11414] Cannot create hsr debugfs directory [ 276.513569][T11395] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.535847][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.538362][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.541533][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 276.543841][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.545916][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.559428][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 276.605813][T11456] Bluetooth: MGMT ver 1.23 [ 276.630242][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.707824][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.765090][T11395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.807872][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.889056][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.952966][T11395] veth0_vlan: entered promiscuous mode [ 276.957419][T11395] veth1_vlan: entered promiscuous mode [ 276.968092][T11395] veth0_macvtap: entered promiscuous mode [ 276.971713][T11395] veth1_macvtap: entered promiscuous mode [ 276.977598][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.980294][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.982741][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.985667][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.988162][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.990958][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.994206][T11395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.998262][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.001093][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.004487][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.008430][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.011052][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.013745][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.017064][T11395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.026361][T11395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.028632][T11395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.030809][T11395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.033094][T11395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.070495][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.072540][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.141391][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.147791][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.466148][ T5304] Bluetooth: hci0: command tx timeout [ 277.481638][T11466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.511896][ T1026] bridge_slave_1: left allmulticast mode [ 277.513996][ T1026] bridge_slave_1: left promiscuous mode [ 277.518538][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.537144][ T1026] bridge_slave_0: left allmulticast mode [ 277.538672][ T1026] bridge_slave_0: left promiscuous mode [ 277.540181][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.817789][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.822141][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.826883][ T1026] bond0 (unregistering): Released all slaves [ 278.157964][T11414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.162672][T11414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.166601][T11414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.169609][T11414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.178370][T11486] /dev/sr0: Can't open blockdev [ 278.201433][T11414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.208087][T11414] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.212888][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.215454][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.221587][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.223534][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.300905][T11414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.319858][T11414] veth0_vlan: entered promiscuous mode [ 278.324111][T11414] veth1_vlan: entered promiscuous mode [ 278.335546][T11492] /dev/sr0: Can't open blockdev [ 278.337413][T11414] veth0_macvtap: entered promiscuous mode [ 278.340653][T11414] veth1_macvtap: entered promiscuous mode [ 278.344994][ T5304] Bluetooth: hci2: command tx timeout [ 278.349727][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.352505][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.355942][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.358583][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.361159][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.363847][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.367091][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.369771][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.373463][T11414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.377743][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.380481][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.382927][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.386600][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.389071][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.391743][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.394212][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.397016][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.400353][T11414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.404304][T11414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.407122][T11414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.409488][T11414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.411604][T11414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.434364][T11501] netlink: 'syz.2.1684': attribute type 4 has an invalid length. [ 278.667051][ T5954] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 278.672246][T11476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.674270][T11476] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 278.677208][T11476] [ 278.678022][T11476] ============================================ [ 278.680080][T11476] WARNING: possible recursive locking detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.682094][T11476] 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 Not tainted [ 278.685808][T11476] -------------------------------------------- [ 278.687819][T11476] syz.3.1682/11476 is trying to acquire lock: [ 278.689817][T11476] ffff888024ea4078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_set_connectable_complete+0x143/0x330 [ 278.693149][T11476] [ 278.693149][T11476] but task is already holding lock: [ 278.695410][T11476] ffff888024ea4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x34c/0x1260 [ 278.698510][T11476] [ 278.698510][T11476] other info that might help us debug this: [ 278.701531][T11476] Possible unsafe locking scenario: [ 278.701531][T11476] [ 278.704458][T11476] CPU0 [ 278.705649][T11476] ---- [ 278.706854][T11476] lock(&hdev->lock); [ 278.708411][T11476] lock(&hdev->lock); [ 278.709812][T11476] [ 278.709812][T11476] *** DEADLOCK *** [ 278.709812][T11476] [ 278.712591][T11476] May be due to missing lock nesting notation [ 278.712591][T11476] [ 278.715374][T11476] 4 locks held by syz.3.1682/11476: [ 278.717097][T11476] #0: ffffffff8ff4a7c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x168/0x570 [ 278.720572][T11476] #1: ffff888024ea4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 278.723729][T11476] #2: ffff888024ea4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x34c/0x1260 [ 278.726880][T11476] #3: ffff888024ea4690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x50/0x1f0 [ 278.730381][T11476] [ 278.730381][T11476] stack backtrace: [ 278.732406][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.3.1682 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 278.735999][T11476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.739551][T11476] Call Trace: [ 278.740679][T11476] [ 278.741669][T11476] dump_stack_lvl+0x116/0x1f0 [ 278.743242][T11476] print_deadlock_bug+0x2e3/0x410 [ 278.744937][T11476] __lock_acquire+0x2185/0x3ce0 [ 278.746568][T11476] ? __pfx___lock_acquire+0x10/0x10 [ 278.748309][T11476] ? hlock_class+0x4e/0x130 [ 278.749780][T11476] ? __lock_acquire+0x163e/0x3ce0 [ 278.751451][T11476] lock_acquire.part.0+0x11b/0x380 [ 278.753186][T11476] ? mgmt_set_connectable_complete+0x143/0x330 [ 278.755116][T11476] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 278.756918][T11476] ? rcu_is_watching+0x12/0xc0 [ 278.758472][T11476] ? trace_lock_acquire+0x14a/0x1d0 [ 278.760176][T11476] ? mgmt_set_connectable_complete+0x143/0x330 [ 278.762228][T11476] ? lock_acquire+0x2f/0xb0 [ 278.763743][T11476] ? mgmt_set_connectable_complete+0x143/0x330 [ 278.765798][T11476] __mutex_lock+0x175/0x9c0 [ 278.767292][T11476] ? mgmt_set_connectable_complete+0x143/0x330 [ 278.769218][T11476] ? mgmt_set_connectable_complete+0x143/0x330 [ 278.771127][T11476] ? __pfx___mutex_trylock_common+0x10/0x10 [ 278.772983][T11476] ? __pfx___mutex_lock+0x10/0x10 [ 278.774622][T11476] ? __mutex_lock+0x1a6/0x9c0 [ 278.776098][T11476] ? mgmt_set_connectable_complete+0x143/0x330 [ 278.778044][T11476] mgmt_set_connectable_complete+0x143/0x330 [ 278.779863][T11476] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 278.781874][T11476] ? lock_acquire.part.0+0x11b/0x380 [ 278.783522][T11476] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 278.785557][T11476] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 278.787653][T11476] hci_cmd_sync_dequeue+0x178/0x1f0 [ 278.789340][T11476] cmd_complete_rsp+0x46/0x1e0 [ 278.790828][T11476] mgmt_pending_foreach+0xdf/0x140 [ 278.792422][T11476] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 278.794121][T11476] __mgmt_power_off+0x12f/0x2c0 [ 278.795707][T11476] ? __pfx___mgmt_power_off+0x10/0x10 [ 278.797398][T11476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.799203][T11476] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.800802][T11476] ? 0xffffffff81000000 [ 278.802148][T11476] hci_dev_close_sync+0xd37/0x1260 [ 278.803803][T11476] hci_dev_do_close+0x2e/0x90 [ 278.805360][T11476] hci_rfkill_set_block+0x225/0x360 [ 278.807013][T11476] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.808601][T11476] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 278.810347][T11476] rfkill_set_block+0x203/0x560 [ 278.811888][T11476] rfkill_fop_write+0x2ce/0x570 [ 278.813468][T11476] ? __pfx_rfkill_fop_write+0x10/0x10 [ 278.815222][T11476] ? bpf_lsm_file_permission+0x9/0x10 [ 278.816872][T11476] ? security_file_permission+0x71/0x210 [ 278.818607][T11476] ? __pfx_rfkill_fop_write+0x10/0x10 [ 278.820249][T11476] vfs_write+0x24c/0x1150 [ 278.821661][T11476] ? __fget_files+0x23a/0x3f0 [ 278.823227][T11476] ? __pfx_lock_release+0x10/0x10 [ 278.824906][T11476] ? trace_lock_acquire+0x14a/0x1d0 [ 278.826532][T11476] ? __pfx_vfs_write+0x10/0x10 [ 278.828002][T11476] ? lock_acquire+0x2f/0xb0 [ 278.829426][T11476] ? __fget_files+0x40/0x3f0 [ 278.830914][T11476] ? __fget_files+0x244/0x3f0 [ 278.832491][T11476] ksys_write+0x1fa/0x260 [ 278.833942][T11476] ? __pfx_ksys_write+0x10/0x10 [ 278.835610][T11476] __do_fast_syscall_32+0x73/0x120 [ 278.837177][T11476] do_fast_syscall_32+0x32/0x80 [ 278.838470][T11476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.840090][T11476] RIP: 0023:0xf739e579 [ 278.841140][T11476] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.845981][T11476] RSP: 002b:00000000f568655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 278.848063][T11476] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000200004c0 [ 278.850053][T11476] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.852094][T11476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.854070][T11476] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 278.856041][T11476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.858100][T11476] [ 279.534942][ T5304] Bluetooth: hci0: command 0x040f tx timeout [ 280.414969][ T5304] Bluetooth: hci2: command tx timeout [ 282.495127][ T5304] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 00:26:03 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea00014d4440 RCX=ffffffff81f9de54 RDX=1ffffd400029a889 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff888040d09550 RSP=ffffc90003abf7a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000004fbc R12=ffffea00014d4488 R13=0000000000000001 R14=0000000000000000 R15=ffffea00014d4440 RIP=ffffffff818ca6e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fa6e40 CR3=000000002a16e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f743cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85046955 RDI=ffffffff9a644320 RBP=ffffffff9a6442e0 RSP=ffffc90003b67080 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000066 R14=ffffffff850468f0 R15=0000000000000000 RIP=ffffffff8504697f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fa10ff8 CR3=0000000061b4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90000015000 RBX=0000000000000580 RCX=0000000000000004 RDX=0000000000000010 RSI=ffffc90000540ad8 RDI=ffff88801be9b580 RBP=00000000000800e2 RSP=ffffc900005409d0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8b4f7ce0 R12=0000000000000057 R13=0000000000000001 R14=dffffc0000000000 R15=ffff888040403800 RIP=ffffffff850f1d4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0003 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fa12ff8 CR3=0000000061b4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002b3f4c RBX=0000000000000003 RCX=ffffffff8b148da9 RDX=ffffed10056e7026 RSI=ffffffff8bb13660 RDI=ffffffff8164037c RBP=ffffed10036ee488 RSP=ffffc90000497e08 R8 =0000000000000000 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000001 R12=0000000000000003 R13=ffff88801b772440 R14=ffffffff901cf208 R15=0000000000000000 RIP=ffffffff8b14a18f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffea88f9ff8 CR3=0000000045bd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=4e2ce92645d2d91f 7077fc0fb3793eb0 4e2ce92645d2d91f 7077fc0fb3793eb0 4e2ce92645d2d91f 7077fc0fb3793eb0 4e2ce92645d2d91f 7077fc0fb3793eb0 ZMM18=0df465fa8dbe6a9d c6f08909c6459834 0df465fa8dbe6a9d c6f08909c6459834 0df465fa8dbe6a9d c6f08909c6459834 0df465fa8dbe6a9d c6f08909c6459834 ZMM19=300f000000000000 0000000000000005 300f000000000000 0000000000000004 300f000000000000 0000000000000003 300f000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=7077fc0f7077fc0f 7077fc0f7077fc0f 7077fc0f7077fc0f 7077fc0f7077fc0f 7077fc0f7077fc0f 7077fc0f7077fc0f 7077fc0f7077fc0f 7077fc0f7077fc0f ZMM22=45d2d91f45d2d91f 45d2d91f45d2d91f 45d2d91f45d2d91f 45d2d91f45d2d91f 45d2d91f45d2d91f 45d2d91f45d2d91f 45d2d91f45d2d91f 45d2d91f45d2d91f ZMM23=4e2ce9264e2ce926 4e2ce9264e2ce926 4e2ce9264e2ce926 4e2ce9264e2ce926 4e2ce9264e2ce926 4e2ce9264e2ce926 4e2ce9264e2ce926 4e2ce9264e2ce926 ZMM24=c6459834c6459834 c6459834c6459834 c6459834c6459834 c6459834c6459834 c6459834c6459834 c6459834c6459834 c6459834c6459834 c6459834c6459834 ZMM25=c6f08909c6f08909 c6f08909c6f08909 c6f08909c6f08909 c6f08909c6f08909 c6f08909c6f08909 c6f08909c6f08909 c6f08909c6f08909 c6f08909c6f08909 ZMM26=8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d 8dbe6a9d8dbe6a9d ZMM27=0df465fa0df465fa 0df465fa0df465fa 0df465fa0df465fa 0df465fa0df465fa 0df465fa0df465fa 0df465fa0df465fa 0df465fa0df465fa 0df465fa0df465fa ZMM28=000001f0000001ef 000001ee000001ed 000001ec000001eb 000001ea000001e9 000001e8000001e7 000001e6000001e5 000001e4000001e3 000001e2000001e1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2e0f00002e0f0000 2e0f00002e0f0000 2e0f00002e0f0000 2e0f00002e0f0000 2e0f00002e0f0000 2e0f00002e0f0000 2e0f00002e0f0000 2e0f00002e0f0000