last executing test programs: 15.900856693s ago: executing program 2 (id=222): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000002c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000280)=[r5], 0x1, r6, r3, 0x3, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x7ffffffe, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 15.900560007s ago: executing program 2 (id=223): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x3cf9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80000000}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e31, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0xfecc, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000400000014001680100008800c0001800600010000000000"], 0x38}}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='numa_maps\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200"], 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0200000002"], 0x10) read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r11, 0x0) 15.570917299s ago: executing program 2 (id=224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100088], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x101000) ftruncate(r4, 0x0) 15.570547692s ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x4d}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000093ba000600000aff3a"], 0x2c}}, 0x0) 11.047044786s ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x4d}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000093ba000600000aff3a"], 0x2c}}, 0x0) 4.198774377s ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x4d}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000093ba000600000aff3a"], 0x2c}}, 0x0) 3.874658144s ago: executing program 1 (id=293): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x6024, &(0x7f00000004c0)={0x0, 0x2d4c, 0x80, 0x20000003, 0x271}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, "fde4480520f512000000000000000000000010"}) 3.570588806s ago: executing program 1 (id=295): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x50323234, 0x0, 0x0, [{}, {}, {0x0, 0x800}, {}, {}, {0x0, 0x3}, {}, {0x2}], 0x91, 0xf6, 0x6, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x25) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="22000000030000000000000000000000000000000000000001000000000000005e003ae1a70d1f17e47e8eafec5df56aa16c5b70ad7a886f3840547324616a9078baefcf33e97811a3d344e3504a8ca0e8a26b6f8c04bff125f8e16bec6dc43c6f98398579c1d843f1055f189e644a3fa876bed8bf75"], 0x22) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000540)={0x0, 0x0, 0x659}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f00000000c0)=[r10], 0x0, &(0x7f0000000380)=[r11], &(0x7f0000000340)}) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYRESDEC], 0x1c}}, 0x20000804) 3.079800886s ago: executing program 0 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff90}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (fail_nth: 23) 2.98049898s ago: executing program 0 (id=303): socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000400)=0x2, 0x6, 0x1, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.90051992s ago: executing program 3 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000d0429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100000000ffe00001c0012800b00010062726964676500000c000280060027"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.806555078s ago: executing program 3 (id=305): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$media(&(0x7f0000000280), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001c00)=ANY=[@ANYBLOB="180000000000000000000000e61f5a2d181100005844e28859737e9aacc4aeb734c499307803491bf11413e3bc782cd3cbef50e7ed73c045ae9b97820abee5b8e07c5f916ccdda6228b7fc4c8847d987ad3f178ce84194ac2581e01267d7e4d2dcd9c93cf28ce1aeb9fd844d9bd76500723156a6c1ae9ab084bf2d069cfe3fa393ddef620ca2bf0888a7f973c3815e31f1950330d907a97b8eb7876d5afdbf493ec5e39ef047431bfecc872e09012712270c71ae2ac5bc48b6ebfd8db7eaf3bf0e002614551058c12b635e5347ad483df0c59fc698bf9768356621c68a48c1980e9ad3bde1eab5722870ba57", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000002000000950000000000000056fa20a50279ec06db98019dea38812ada4a293337345895c484542ae6"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) 2.640163663s ago: executing program 1 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000000000bb810000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='hrtimer_start\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x11001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x4020940d, &(0x7f0000000c00)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) (fail_nth: 6) 2.501053885s ago: executing program 1 (id=307): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0xf6ffffff, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_null}]}) 2.500731283s ago: executing program 1 (id=308): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$fb1(0xffffff9c, &(0x7f0000000180), 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) r3 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}}, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xd, 0x1}, 'syz1\x00', 0x55}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="df4800000000000018000c0000002c000380280003801400018008000100020000000500020000000000100001800909020086697403000000001800018014000200"], 0x58}}, 0xc000) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01"], 0xf) socket$inet6(0xa, 0x2, 0x3a) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) syz_open_dev$usbmon(0x0, 0xf231, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000000"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 2.070780436s ago: executing program 0 (id=309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100088], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x101000) ftruncate(r4, 0x0) 1.889016808s ago: executing program 3 (id=310): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864d1, &(0x7f0000000080)={0x0, 0x2, 0x6, 0x0, 0x0}) r2 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000080)) 1.808329293s ago: executing program 3 (id=311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./bus\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100088], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ftruncate(r4, 0x0) 1.214186282s ago: executing program 0 (id=312): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000ac0)=@raw=[@jmp, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x1, 0x0, 0xf, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x2, 0x0, 0x7}], 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(0xffffffffffffffff, &(0x7f0000000740)="fc0000001c000704ab5b2509b868030002ab087a0100000005481093210001c0f0030584250060100000000000031815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec1000000000000000b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec", 0xa7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) (fail_nth: 92) 1.070660615s ago: executing program 0 (id=313): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x800000, &(0x7f0000000340)="94ac0221cba736df250fb8fb2834965a0d5abda8428520ab0eb75b433d61be3506c97747", 0x24, &(0x7f0000000280), 0x0, 0x0) gettid() r2 = signalfd(r0, &(0x7f0000000140)={[0x7ff, 0x6]}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000600)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="740100000c0601082b", @ANYRES32=r1, @ANYBLOB="2242159777a0255fc159613641ea7cffeb25a484bf26add829342067914042995333a2633401d48008001200", @ANYBLOB, @ANYRES32, @ANYBLOB="3d867ab27a4e5cb4d9e744a7364136f9869ea91ab51e929b1c28836b5965e0ba908afae77945fb0991f5d2ce24c4192edf0cc1087f5b010787cbc5dc401fc35d433e3f863fc5af9cbb94da1e"], 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58) gettid() lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) syz_clone3(&(0x7f0000000540)={0x101840000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x8d}, 0x10b8c}, 0x1, 0xf0}, 0x1000000) 1.069767655s ago: executing program 1 (id=314): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) landlock_create_ruleset(&(0x7f00000000c0)={0x8d3, 0x0, 0x5}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x4, 0xfffffefe, 0x3, 0xffffffff, 0xd, 0x0, 0x7e}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000400)={[{@volatile}, {@index_on}, {@metacopy_off}], [{@uid_gt}, {@seclabel}, {@fowner_eq}]}) mkdir(&(0x7f0000000280)='./file1/file0\x00', 0x1d6) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/131, 0x83}], 0x2000000000000107, 0x0, 0x7fff) bind$unix(r2, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008aec1, &(0x7f0000000080)=ANY=[@ANYBLOB="81"]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000100070000000900020073ff0f0000000000000007800800130000000000050005000000000005000400000000000d000300686173683a6d6163000000003d9f843166055b3174bafde3824200000000000001012f9164b5761e56dc840c"], 0x54}}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mq_open(&(0x7f00000000c0)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', 0x40, 0x1, &(0x7f0000000100)={0x1, 0x838c, 0xfffffffffffffff9, 0x8}) syz_usb_disconnect(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYRES32=r9], 0x0) 887.925746ms ago: executing program 3 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 887.593531ms ago: executing program 3 (id=316): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x48b, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xffffffffffffffd9, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 0s ago: executing program 0 (id=317): socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000400)=0x2, 0x6, 0x1, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53417' (ED25519) to the list of known hosts. [ 34.068858][ T5875] cgroup: Unknown subsys name 'net' [ 34.224495][ T5875] cgroup: Unknown subsys name 'cpuset' [ 34.228222][ T5875] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.179247][ T5875] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.904382][ T5965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.904980][ T5967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.909419][ T5967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.911537][ T5967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.912303][ T5969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.913680][ T5972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.915940][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.917280][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.918962][ T5968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.919265][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.920369][ T5969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.920921][ T5969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.921191][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.921583][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.921794][ T5972] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.922161][ T5972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.922405][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.922615][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.924648][ T5968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.926782][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.929734][ T5968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.947661][ T5968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.950027][ T5968] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.952176][ T5968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.083940][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 38.116779][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 38.136869][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 38.201914][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.204419][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.206384][ T5957] bridge_slave_0: entered allmulticast mode [ 38.208433][ T5957] bridge_slave_0: entered promiscuous mode [ 38.214708][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.216552][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.218299][ T5957] bridge_slave_1: entered allmulticast mode [ 38.220624][ T5957] bridge_slave_1: entered promiscuous mode [ 38.248931][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 38.315885][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.318364][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.320366][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.322328][ T5958] bridge_slave_0: entered allmulticast mode [ 38.324508][ T5958] bridge_slave_0: entered promiscuous mode [ 38.348910][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.351496][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.354116][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.356598][ T5958] bridge_slave_1: entered allmulticast mode [ 38.359506][ T5958] bridge_slave_1: entered promiscuous mode [ 38.389611][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.392386][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.394291][ T5970] bridge_slave_0: entered allmulticast mode [ 38.396331][ T5970] bridge_slave_0: entered promiscuous mode [ 38.430351][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.432222][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.434092][ T5970] bridge_slave_1: entered allmulticast mode [ 38.436157][ T5970] bridge_slave_1: entered promiscuous mode [ 38.464050][ T5957] team0: Port device team_slave_0 added [ 38.466624][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.469957][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.481361][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.483800][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.485670][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.487523][ T5964] bridge_slave_0: entered allmulticast mode [ 38.489478][ T5964] bridge_slave_0: entered promiscuous mode [ 38.492930][ T5957] team0: Port device team_slave_1 added [ 38.519246][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.529874][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.531832][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.533724][ T5964] bridge_slave_1: entered allmulticast mode [ 38.535676][ T5964] bridge_slave_1: entered promiscuous mode [ 38.553499][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.555332][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.564215][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.569025][ T5958] team0: Port device team_slave_0 added [ 38.594780][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.598363][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.601372][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.610165][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.617662][ T5958] team0: Port device team_slave_1 added [ 38.627919][ T5970] team0: Port device team_slave_0 added [ 38.630696][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.641827][ T5970] team0: Port device team_slave_1 added [ 38.661241][ T5964] team0: Port device team_slave_0 added [ 38.663207][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.665080][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.672555][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.700295][ T5964] team0: Port device team_slave_1 added [ 38.702665][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.704537][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.712036][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.723005][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.724892][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.731796][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.737936][ T5957] hsr_slave_0: entered promiscuous mode [ 38.741164][ T5957] hsr_slave_1: entered promiscuous mode [ 38.766731][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.768611][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.775504][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.780043][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.783541][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.790702][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.806767][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.809300][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.819019][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.895910][ T5958] hsr_slave_0: entered promiscuous mode [ 38.898988][ T5958] hsr_slave_1: entered promiscuous mode [ 38.904443][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.907430][ T5958] Cannot create hsr debugfs directory [ 38.919346][ T5970] hsr_slave_0: entered promiscuous mode [ 38.921325][ T5970] hsr_slave_1: entered promiscuous mode [ 38.923043][ T5970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.925432][ T5970] Cannot create hsr debugfs directory [ 38.932241][ T5964] hsr_slave_0: entered promiscuous mode [ 38.934921][ T5964] hsr_slave_1: entered promiscuous mode [ 38.937392][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.940112][ T5964] Cannot create hsr debugfs directory [ 39.102521][ T5957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.107114][ T5957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.122788][ T5957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.126992][ T5957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.182494][ T5970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.186865][ T5970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.190098][ T5970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.193482][ T5970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.217997][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.224597][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.228892][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.239580][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.267440][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.271709][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.275034][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.279002][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.295948][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.321246][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.326428][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.328486][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.332722][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.345944][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.347835][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.357109][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.367758][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.369675][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.376932][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.378802][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.383240][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.393674][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.410616][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.412510][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.418520][ T5970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.421785][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.429611][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.436062][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.437944][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.449385][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.455241][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.457129][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.466762][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.468666][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.478169][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.502191][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.517853][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.541295][ T5957] veth0_vlan: entered promiscuous mode [ 39.552155][ T5957] veth1_vlan: entered promiscuous mode [ 39.556817][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.580295][ T5957] veth0_macvtap: entered promiscuous mode [ 39.582858][ T5970] veth0_vlan: entered promiscuous mode [ 39.586965][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.592810][ T5970] veth1_vlan: entered promiscuous mode [ 39.595053][ T5957] veth1_macvtap: entered promiscuous mode [ 39.608899][ T5958] veth0_vlan: entered promiscuous mode [ 39.620324][ T5958] veth1_vlan: entered promiscuous mode [ 39.625065][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.628927][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.635795][ T5957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.638230][ T5957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.640881][ T5957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.643035][ T5957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649875][ T5970] veth0_macvtap: entered promiscuous mode [ 39.664678][ T5970] veth1_macvtap: entered promiscuous mode [ 39.672379][ T5964] veth0_vlan: entered promiscuous mode [ 39.678446][ T5964] veth1_vlan: entered promiscuous mode [ 39.689195][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.692983][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.696183][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.704171][ T5958] veth0_macvtap: entered promiscuous mode [ 39.706824][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.709538][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.712904][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.727156][ T5958] veth1_macvtap: entered promiscuous mode [ 39.732032][ T5970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.734385][ T5970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.736644][ T5970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.738903][ T5970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.744217][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.747230][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.754261][ T5964] veth0_macvtap: entered promiscuous mode [ 39.758749][ T5964] veth1_macvtap: entered promiscuous mode [ 39.770585][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.773275][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.776520][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.780559][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.785118][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.793396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.796095][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.796688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.798862][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.804358][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.807050][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.810909][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.814859][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.817469][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.819840][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.822447][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.835012][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.835169][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.838014][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.840910][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.845899][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.848563][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.852285][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.855029][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.856555][ T5957] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.858236][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.871635][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.874533][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.877027][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.879660][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.882278][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.885306][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.889616][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.894592][ T5964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.897341][ T5964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.899626][ T5964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.902049][ T5964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.925422][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.928196][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.932607][ T5968] Bluetooth: hci3: command tx timeout [ 39.954918][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.957812][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.987360][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.989883][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.990033][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.000315][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.010603][ T5968] Bluetooth: hci0: command tx timeout [ 40.013032][ T5968] Bluetooth: hci1: command tx timeout [ 40.015252][ T5960] Bluetooth: hci2: command tx timeout [ 40.021988][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.024850][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.027627][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.035542][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.037997][ T6021] Zero length message leads to an empty skb [ 40.153027][ T6031] trusted_key: syz.2.3 sent an empty control message without MSG_MORE. [ 40.203810][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.760377][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.913442][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 40.916295][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 40.919695][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 40.923029][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.934479][ T6030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.940503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 40.951687][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 40.961042][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 40.963812][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 40.970197][ T6044] No control pipe specified [ 40.980556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.071776][ T6046] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5'. [ 41.204751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 41.570288][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 41.701573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.802752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.880434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.894889][ T64] IPVS: starting estimator thread 0... [ 41.897706][ T6087] tipc: Started in network mode [ 41.899686][ T6087] tipc: Node identity ac1414aa, cluster identity 4711 [ 41.904102][ T6087] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 41.906512][ T6087] tipc: Enabled bearer , priority 10 [ 41.980456][ T6088] IPVS: using max 38 ests per chain, 91200 per kthread [ 42.020816][ T5973] Bluetooth: hci3: command tx timeout [ 42.051004][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 42.090114][ T6001] usb 5-1: USB disconnect, device number 2 [ 42.092046][ T5973] Bluetooth: hci1: command tx timeout [ 42.093527][ T5968] Bluetooth: hci2: command tx timeout [ 42.093554][ T5968] Bluetooth: hci0: command tx timeout [ 42.200289][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 42.250365][ T64] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.260636][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 42.263698][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 42.269443][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 42.272028][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.283437][ T6054] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 42.287717][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 42.340407][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 42.416731][ T64] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 42.419537][ T64] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 42.422840][ T6095] bridge_slave_1: left allmulticast mode [ 42.424442][ T6095] bridge_slave_1: left promiscuous mode [ 42.426686][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.429259][ T64] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 42.432960][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.433456][ T6095] bridge_slave_0: left allmulticast mode [ 42.436641][ T6095] bridge_slave_0: left promiscuous mode [ 42.438147][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.445617][ T6092] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 42.451777][ T64] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 42.480290][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 42.630318][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 42.673221][ T5998] usb 8-1: USB disconnect, device number 2 [ 42.721870][ T8] usb 7-1: USB disconnect, device number 2 [ 42.770915][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 42.910890][ T6001] tipc: Node number set to 2886997162 [ 43.060565][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 43.147866][ T6107] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 43.150437][ T6107] netlink: 17 bytes leftover after parsing attributes in process `syz.3.14'. [ 43.330891][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 43.860495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.870695][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 44.100764][ T5973] Bluetooth: hci3: command tx timeout [ 44.170429][ T5973] Bluetooth: hci0: command tx timeout [ 44.171103][ T5960] Bluetooth: hci2: command tx timeout [ 44.171128][ T5968] Bluetooth: hci1: command tx timeout [ 44.176345][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 44.332046][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 44.335003][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 44.337533][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 44.339862][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.348475][ T6117] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.352577][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 44.609950][ T1325] usb 7-1: USB disconnect, device number 3 [ 44.788081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 44.848304][ T6129] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 44.852626][ T6127] IPVS: stopping master sync thread 6129 ... [ 44.856712][ T6127] ./file0: Can't lookup blockdev [ 44.891206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 44.970997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 45.494287][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 45.498002][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 45.771437][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 45.895141][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.899884][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.936043][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 45.955724][ T6160] FAULT_INJECTION: forcing a failure. [ 45.955724][ T6160] name failslab, interval 1, probability 0, space 0, times 1 [ 45.959147][ T6160] CPU: 2 UID: 0 PID: 6160 Comm: syz.1.28 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 45.961808][ T6160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.964587][ T6160] Call Trace: [ 45.965462][ T6160] [ 45.966238][ T6160] dump_stack_lvl+0x16c/0x1f0 [ 45.967472][ T6160] should_fail_ex+0x497/0x5b0 [ 45.968739][ T6160] ? fs_reclaim_acquire+0xae/0x150 [ 45.970086][ T6160] should_failslab+0xc2/0x120 [ 45.971344][ T6160] __kmalloc_noprof+0xce/0x4f0 [ 45.972630][ T6160] ? lsm_blob_alloc+0x68/0x90 [ 45.973862][ T6160] lsm_blob_alloc+0x68/0x90 [ 45.975052][ T6160] security_sk_alloc+0x30/0x270 [ 45.976349][ T6160] sk_prot_alloc+0x1c7/0x2a0 [ 45.977563][ T6160] sk_alloc+0x36/0xb90 [ 45.978634][ T6160] ? __pfx_genl_release+0x10/0x10 [ 45.979983][ T6160] __netlink_create+0x5e/0x2c0 [ 45.981260][ T6160] ? __wake_up+0x3f/0x60 [ 45.982388][ T6160] netlink_create+0x3a4/0x630 [ 45.983611][ T6160] ? __pfx_genl_bind+0x10/0x10 [ 45.984912][ T6160] ? __pfx_genl_unbind+0x10/0x10 [ 45.986208][ T6160] __sock_create+0x335/0x8d0 [ 45.987429][ T6160] __sys_socket+0x14f/0x260 [ 45.988654][ T6160] ? __might_fault+0xe3/0x190 [ 45.989890][ T6160] ? __pfx___sys_socket+0x10/0x10 [ 45.991269][ T6160] ? __might_fault+0xe3/0x190 [ 45.992533][ T6160] __do_compat_sys_socketcall+0x57e/0x700 [ 45.994026][ T6160] ? __fget_files+0x206/0x3a0 [ 45.995272][ T6160] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 45.996923][ T6160] ? fput+0x67/0x440 [ 45.997966][ T6160] __do_fast_syscall_32+0x73/0x120 [ 45.999308][ T6160] do_fast_syscall_32+0x32/0x80 [ 46.000625][ T6160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 46.002276][ T6160] RIP: 0023:0xf73de579 [ 46.003351][ T6160] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 46.008354][ T6160] RSP: 002b:00000000f50c54d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 46.010532][ T6160] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f50c54e0 [ 46.012602][ T6160] RDX: 00000000f73d0ff4 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.014641][ T6160] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 46.016727][ T6160] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 46.018769][ T6160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.020839][ T6160] [ 46.084374][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 46.086910][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 46.170583][ T5960] Bluetooth: hci3: command tx timeout [ 46.250338][ T5960] Bluetooth: hci2: command tx timeout [ 46.251827][ T5960] Bluetooth: hci1: command tx timeout [ 46.260418][ T5973] Bluetooth: hci0: command tx timeout [ 46.660350][ T64] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 46.667136][ T6186] input: syz0 as /devices/virtual/input/input5 [ 46.811501][ T64] usb 6-1: config 0 has no interfaces? [ 46.813269][ T64] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 46.815684][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.819224][ T64] usb 6-1: config 0 descriptor?? [ 46.970504][ C2] net_ratelimit: 2 callbacks suppressed [ 46.970516][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 47.023558][ T6181] netlink: 72 bytes leftover after parsing attributes in process `syz.1.34'. [ 47.026133][ T6181] netlink: 72 bytes leftover after parsing attributes in process `syz.1.34'. [ 47.029075][ T6181] netlink: 'syz.1.34': attribute type 2 has an invalid length. [ 47.038057][ T64] usb 6-1: USB disconnect, device number 2 [ 47.632023][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 47.634350][ T6201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 48.020296][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 48.301021][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 48.370597][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 48.461585][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 48.464446][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 48.466946][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 48.469282][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.476070][ T6214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.479447][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 48.534085][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 48.537116][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 48.540029][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 48.542809][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.549092][ T6205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 48.552730][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 48.820393][ T25] usb 6-1: USB disconnect, device number 3 [ 49.050322][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 49.312556][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.407007][ T25] usb 7-1: USB disconnect, device number 4 [ 49.493543][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 49.496609][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 49.499622][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 49.502976][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.512166][ T6224] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 49.518811][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 49.748025][ T64] usb 5-1: USB disconnect, device number 3 [ 50.100649][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 50.715092][ T6254] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 50.716645][ T6253] IPVS: stopping master sync thread 6254 ... [ 50.726443][ T6253] ./file0: Can't lookup blockdev [ 50.772479][ T6256] __nla_validate_parse: 13 callbacks suppressed [ 50.772491][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 50.776739][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.130276][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 51.674364][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 51.676962][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 51.837308][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 52.170849][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 52.180327][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.333511][ T25] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.336754][ T25] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 52.339912][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 52.342613][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.346817][ T6272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.350160][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 52.616416][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 52.619593][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 52.622832][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 52.625873][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 52.628167][ T6292] netlink: 104 bytes leftover after parsing attributes in process `syz.3.61'. [ 52.637341][ T6293] netlink: 'syz.0.62': attribute type 4 has an invalid length. [ 52.643133][ T5847] usb 6-1: USB disconnect, device number 4 [ 53.180342][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 53.220300][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 53.345573][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.349082][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.353597][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.356299][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.360068][ T6296] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.366142][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 53.684372][ T8] usb 7-1: USB disconnect, device number 5 [ 53.923060][ T6314] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 53.940207][ T6312] IPVS: stopping master sync thread 6314 ... [ 53.945213][ T6312] ./file0: Can't lookup blockdev [ 54.250298][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 54.270497][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.664635][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 54.667475][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 54.669992][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.691347][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.709464][ T6321] bridge_slave_1: left allmulticast mode [ 54.711056][ T6321] bridge_slave_1: left promiscuous mode [ 54.711681][ T6311] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.712604][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.719058][ T6321] bridge_slave_0: left allmulticast mode [ 54.720621][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 54.725720][ T6321] bridge_slave_0: left promiscuous mode [ 54.727368][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.228996][ T64] usb 8-1: USB disconnect, device number 3 [ 55.300312][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 56.072583][ T6339] __nla_validate_parse: 8 callbacks suppressed [ 56.072593][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 56.077019][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 56.330286][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 56.430336][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.432342][ T64] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.581888][ T64] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 56.582013][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 56.584732][ T64] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 56.587582][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 56.590085][ T64] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 56.592749][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 56.596222][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.597865][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.603598][ T6340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.605348][ T6347] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 56.606722][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 56.614526][ T64] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 56.868325][ T25] usb 8-1: USB disconnect, device number 4 [ 56.884658][ T64] usb 5-1: USB disconnect, device number 4 [ 57.012748][ T6355] netlink: 'syz.2.78': attribute type 4 has an invalid length. [ 57.014784][ T6355] netlink: 17 bytes leftover after parsing attributes in process `syz.2.78'. [ 57.370484][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 57.484023][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.486645][ T6359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.489397][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.491850][ T6359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.494092][ T6359] netlink: 104 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.902087][ T5847] IPVS: starting estimator thread 0... [ 57.907189][ T6361] tipc: Started in network mode [ 57.908980][ T6361] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.912638][ T6361] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 57.915639][ T6361] tipc: Enabled bearer , priority 10 [ 57.990396][ T6362] IPVS: using max 38 ests per chain, 91200 per kthread [ 58.050449][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.117401][ T6371] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 58.128232][ T5847] hid-generic 0000:0D17:0000.0002: item fetching failed at offset 0/2 [ 58.131455][ T5847] hid-generic 0000:0D17:0000.0002: probe with driver hid-generic failed with error -22 [ 58.190674][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.225793][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 58.228287][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 58.330444][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.420390][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.470348][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.610700][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.630368][ T5847] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.750403][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.782289][ T5847] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.785209][ T5847] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.788072][ T5847] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.790589][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.800054][ T6382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.805005][ T5847] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.900400][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 58.938073][ T6386] bond0: (slave bond_slave_0): Releasing backup interface [ 58.942501][ T6386] bond0: (slave bond_slave_1): Releasing backup interface [ 58.957008][ T6386] team0: Port device team_slave_0 removed [ 58.975106][ T6386] team0: Port device team_slave_1 removed [ 58.978123][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.980186][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.986808][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.988870][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.041009][ T25] tipc: Node number set to 2886997162 [ 59.077856][ T25] usb 5-1: USB disconnect, device number 5 [ 59.103852][ T57] IPVS: starting estimator thread 0... [ 59.109773][ T6389] tipc: Started in network mode [ 59.111379][ T6389] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.113849][ T6389] tipc: Enabled bearer , priority 10 [ 59.146629][ T6398] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.152858][ T6398] Cannot find del_set index 4 as target [ 59.200971][ T6394] IPVS: using max 38 ests per chain, 91200 per kthread [ 59.410300][ T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.570399][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 59.574562][ T57] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.576464][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.579319][ T57] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.582406][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.585293][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.588933][ T57] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.591250][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.594193][ T57] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.597102][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.599986][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.604448][ T57] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 59.606451][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 59.610104][ T57] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.613714][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.616645][ T57] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.622094][ T57] usb 7-1: string descriptor 0 read error: -22 [ 59.623784][ T57] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.626157][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.633965][ T57] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 60.231128][ T3220] tipc: Node number set to 2886997162 [ 60.450410][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.601607][ T64] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.604460][ T64] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.606870][ T64] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.609111][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.614398][ T6424] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 60.617584][ T64] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.857641][ T57] usb 5-1: USB disconnect, device number 6 [ 61.028927][ T6447] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.898923][ T6450] __nla_validate_parse: 11 callbacks suppressed [ 61.898934][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 61.904648][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 62.378648][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 62.385946][ T6455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 62.388518][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 62.391927][ T6455] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 62.394579][ T6455] netlink: 104 bytes leftover after parsing attributes in process `syz.0.112'. [ 62.570427][ C2] net_ratelimit: 20 callbacks suppressed [ 62.570446][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 63.140347][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 63.290301][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 63.610514][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 63.950822][ T1325] usb 7-1: USB disconnect, device number 6 [ 63.966341][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 63.969184][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 64.170298][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 64.235360][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 64.330490][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 64.650281][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 65.209481][ T6515] netlink: 'syz.3.129': attribute type 4 has an invalid length. [ 65.210268][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 65.213992][ T5973] Bluetooth: hci2: command tx timeout [ 65.370292][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 65.417702][ T6519] FAULT_INJECTION: forcing a failure. [ 65.417702][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 65.425125][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.2.131 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 65.427817][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.430631][ T6519] Call Trace: [ 65.431650][ T6519] [ 65.432488][ T6519] dump_stack_lvl+0x16c/0x1f0 [ 65.433720][ T6519] should_fail_ex+0x497/0x5b0 [ 65.434957][ T6519] should_failslab+0xc2/0x120 [ 65.436207][ T6519] __kmalloc_cache_noprof+0x68/0x420 [ 65.437587][ T6519] ? __pfx_fuse_dev_poll+0x10/0x10 [ 65.438880][ T6519] io_arm_poll_handler+0x3e7/0xc60 [ 65.440346][ T6519] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 65.442059][ T6519] io_queue_async+0xaa/0x420 [ 65.443275][ T6519] io_submit_sqes+0x1751/0x25f0 [ 65.444572][ T6519] __do_sys_io_uring_enter+0xd2d/0x1530 [ 65.446040][ T6519] ? __pfx___schedule+0x10/0x10 [ 65.447302][ T6519] ? __fget_files+0x206/0x3a0 [ 65.448546][ T6519] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 65.450115][ T6519] ? fput+0x67/0x440 [ 65.451144][ T6519] ? ksys_write+0x1ba/0x250 [ 65.452314][ T6519] __do_fast_syscall_32+0x73/0x120 [ 65.453587][ T6519] do_fast_syscall_32+0x32/0x80 [ 65.454772][ T6519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.456258][ T6519] RIP: 0023:0xf7fd0579 [ 65.457283][ T6519] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.461919][ T6519] RSP: 002b:00000000f515657c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 65.463924][ T6519] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000003516 [ 65.465867][ T6519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.467750][ T6519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.469640][ T6519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.471735][ T6519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.473922][ T6519] [ 65.690284][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 67.164275][ T6556] input: syz0 as /devices/virtual/input/input6 [ 67.770306][ C2] net_ratelimit: 7 callbacks suppressed [ 67.770322][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.330333][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.490290][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.610449][ T1325] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.700371][ T57] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.782341][ T1325] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.785250][ T1325] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.787873][ T1325] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.790452][ T1325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.819126][ T6578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.820900][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.822372][ T1325] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.871535][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.874404][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.877094][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.879505][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.883434][ T6583] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.887531][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.297553][ T5847] usb 5-1: USB disconnect, device number 7 [ 69.370318][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 69.433535][ T30] usb 8-1: USB disconnect, device number 5 [ 69.540402][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 69.860413][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 70.000339][ T6597] __nla_validate_parse: 3 callbacks suppressed [ 70.000350][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 70.005132][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 70.135211][ T6598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.410401][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 70.570323][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 70.574729][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 70.577882][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'. [ 70.595926][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 70.600054][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'. [ 70.623420][ T6608] netlink: 104 bytes leftover after parsing attributes in process `syz.1.159'. [ 70.733401][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.736325][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.890310][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 71.010836][ T6618] process 'syz.2.161' launched './file0' with NULL argv: empty string added [ 71.195482][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 71.198445][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 71.250372][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 71.553347][ T30] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.556219][ T30] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.558748][ T30] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.561183][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.569535][ T6617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.573725][ T30] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.890721][ T1466] usb 8-1: USB disconnect, device number 6 [ 72.358661][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 72.878873][ T6644] FAULT_INJECTION: forcing a failure. [ 72.878873][ T6644] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.882408][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.0.171 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 72.885026][ T6644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.888309][ T6644] Call Trace: [ 72.889226][ T6644] [ 72.890070][ T6644] dump_stack_lvl+0x16c/0x1f0 [ 72.891438][ T6644] should_fail_ex+0x497/0x5b0 [ 72.892733][ T6644] _copy_from_iter+0x29b/0x1400 [ 72.894009][ T6644] ? trace_lock_acquire+0x146/0x1e0 [ 72.895360][ T6644] ? __alloc_skb+0x200/0x380 [ 72.896982][ T6644] ? __pfx__copy_from_iter+0x10/0x10 [ 72.898859][ T6644] ? __virt_addr_valid+0x1a4/0x590 [ 72.900728][ T6644] ? __virt_addr_valid+0x5e/0x590 [ 72.902435][ T6644] ? __phys_addr_symbol+0x30/0x80 [ 72.903762][ T6644] ? __check_object_size+0x488/0x710 [ 72.905126][ T6644] netlink_sendmsg+0x813/0xd70 [ 72.906410][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.907791][ T6644] ____sys_sendmsg+0x9ae/0xb40 [ 72.909039][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.910473][ T6644] ? get_compat_msghdr+0x11b/0x170 [ 72.911860][ T6644] ___sys_sendmsg+0x135/0x1e0 [ 72.913189][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.914535][ T6644] ? __pfx_lock_release+0x10/0x10 [ 72.915957][ T6644] ? trace_lock_acquire+0x146/0x1e0 [ 72.917341][ T6644] ? __fget_files+0x206/0x3a0 [ 72.918570][ T6644] __sys_sendmsg+0x16e/0x220 [ 72.919793][ T6644] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.921157][ T6644] ? syscall_user_dispatch+0x77/0x140 [ 72.922555][ T6644] __do_fast_syscall_32+0x73/0x120 [ 72.923931][ T6644] do_fast_syscall_32+0x32/0x80 [ 72.925200][ T6644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.926870][ T6644] RIP: 0023:0xf742e579 [ 72.927946][ T6644] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.932962][ T6644] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 72.935098][ T6644] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 72.937409][ T6644] RDX: 0000000004008840 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.939421][ T6644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.941443][ T6644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.943456][ T6644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.945726][ T6644] [ 72.946852][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.970374][ C2] net_ratelimit: 5 callbacks suppressed [ 72.970385][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 73.530332][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 73.690321][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 74.020340][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 74.570350][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 74.730328][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.050307][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.269337][ T6695] batman_adv: batadv0: Adding interface: dummy0 [ 75.271216][ T6695] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.277622][ T6695] batman_adv: batadv0: Interface activated: dummy0 [ 75.378531][ T39] audit: type=1400 audit(1732699686.260:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6701 comm="syz.0.192" [ 75.399894][ T6702] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 75.405218][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.407630][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.610334][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.732268][ T6703] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.770318][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.834387][ T6716] netlink: 'syz.3.197': attribute type 4 has an invalid length. [ 75.836484][ T6716] __nla_validate_parse: 8 callbacks suppressed [ 75.836492][ T6716] netlink: 17 bytes leftover after parsing attributes in process `syz.3.197'. [ 75.868146][ T1010] cfg80211: failed to load regulatory.db [ 76.035043][ T6719] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 76.340367][ T5973] Bluetooth: hci2: command tx timeout [ 76.517819][ T6744] syz.0.206 uses obsolete (PF_INET,SOCK_PACKET) [ 76.644654][ T6751] netlink: 'syz.0.208': attribute type 13 has an invalid length. [ 77.069740][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.139961][ T6761] batman_adv: batadv0: Interface deactivated: dummy0 [ 77.142016][ T6761] batman_adv: batadv0: Removing interface: dummy0 [ 77.190277][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.263805][ T6761] bond0: (slave bond_slave_0): Releasing backup interface [ 77.301245][ T6761] bond0: (slave bond_slave_1): Releasing backup interface [ 77.430284][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.520282][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.564306][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.682281][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.708566][ T6761] team0: Port device team_slave_0 removed [ 77.753743][ T6761] team0: Port device team_slave_1 removed [ 77.756099][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.758060][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.762604][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.764618][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.978554][ T6778] input: syz0 as /devices/virtual/input/input7 [ 78.170508][ C2] net_ratelimit: 6 callbacks suppressed [ 78.170524][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 78.390349][ T6093] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.542036][ T6093] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.546108][ T6093] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.549739][ T6093] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.553227][ T6093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.558816][ T6784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.567446][ T6093] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.730389][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 78.838978][ T6791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.220'. [ 78.839176][ T1010] usb 5-1: USB disconnect, device number 8 [ 78.890310][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 78.930584][ T6093] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.064996][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 79.080519][ T6093] usb 8-1: Using ep0 maxpacket: 8 [ 79.083301][ T6093] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.085444][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.088365][ T6093] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.091781][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.094844][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.098651][ T6093] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.100696][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.105148][ T6093] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.108226][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.112152][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.116225][ T6093] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.118218][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.125616][ T6093] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.128717][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.143188][ T6093] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.150777][ T6093] usb 8-1: string descriptor 0 read error: -22 [ 79.152454][ T6093] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 79.154808][ T6093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.161622][ T6093] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 79.210308][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 79.558864][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.559863][ T30] libceph: connect (1)[c::]:6789 error -101 [ 79.563690][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 79.563731][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.568065][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.572112][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.574194][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.576289][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.634260][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 79.692356][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.695066][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.697802][ T6808] bridge_slave_0: entered allmulticast mode [ 79.699126][ T6818] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.700860][ T6808] bridge_slave_0: entered promiscuous mode [ 79.704886][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.707094][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.709575][ T6808] bridge_slave_1: entered allmulticast mode [ 79.712164][ T6808] bridge_slave_1: entered promiscuous mode [ 79.736655][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.741970][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.756370][ T6804] ceph: No mds server is up or the cluster is laggy [ 79.770280][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 79.771949][ T6093] libceph: connect (1)[c::]:6789 error -101 [ 79.773783][ T6093] libceph: mon0 (1)[c::]:6789 connect error [ 79.797030][ T6808] team0: Port device team_slave_0 added [ 79.799687][ T6808] team0: Port device team_slave_1 added [ 79.818596][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.820774][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.827401][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.831427][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.833166][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.839530][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.861879][ T6808] hsr_slave_0: entered promiscuous mode [ 79.863973][ T6808] hsr_slave_1: entered promiscuous mode [ 79.865732][ T6808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.868367][ T6808] Cannot create hsr debugfs directory [ 79.930944][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 79.938628][ T6808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.002368][ T6808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.031878][ T6093] libceph: connect (1)[c::]:6789 error -101 [ 80.033503][ T6093] libceph: mon0 (1)[c::]:6789 connect error [ 80.068657][ T6808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.161829][ T6808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.260339][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 80.262516][ T6808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.267622][ T6808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.280683][ T6808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.283770][ T6808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.295586][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.298099][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.300821][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.303742][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.325218][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.333904][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.341740][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.357845][ T6804] syz.1.227 (6804) used greatest stack depth: 19776 bytes left [ 80.357959][ T6818] ceph: No mds server is up or the cluster is laggy [ 80.361537][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.372688][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.374619][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.395644][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.398052][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.472681][ T39] audit: type=1400 audit(1732699691.360:3): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6827 comm="syz.1.228" [ 80.482654][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.486268][ T6828] netlink: 'syz.1.228': attribute type 10 has an invalid length. [ 80.497540][ T6808] veth0_vlan: entered promiscuous mode [ 80.501104][ T6808] veth1_vlan: entered promiscuous mode [ 80.511013][ T6808] veth0_macvtap: entered promiscuous mode [ 80.513958][ T6808] veth1_macvtap: entered promiscuous mode [ 80.519620][ T6808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.523376][ T6808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.526759][ T6808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.529425][ T6808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.533527][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.539256][ T6808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.543614][ T6808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.546677][ T6808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.549816][ T6808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.553163][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.557333][ T6808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.560774][ T6808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.563715][ T6808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.566709][ T6808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.590567][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.593155][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.601461][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.604494][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.810573][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 80.970336][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 81.300350][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 81.431104][ T1466] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.590575][ T1466] usb 6-1: Using ep0 maxpacket: 32 [ 81.593745][ T1466] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 81.596684][ T1466] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 81.599597][ T1466] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 81.602764][ T1466] usb 6-1: config 1 has no interface number 0 [ 81.604355][ T1466] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.607230][ T1466] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 81.610648][ T1466] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 81.613621][ T1466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.626160][ T1466] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 82.178584][ T1466] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 82.394644][ T25] usb 6-1: USB disconnect, device number 5 [ 82.397710][ T25] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 83.040792][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.380320][ C2] net_ratelimit: 6 callbacks suppressed [ 83.380337][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.434869][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 83.437914][ T6861] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.490729][ T6863] dvmrp0: entered allmulticast mode [ 83.531393][ T5998] usb 8-1: USB disconnect, device number 7 [ 83.753166][ T6878] input: syz0 as /devices/virtual/input/input8 [ 83.821525][ T6880] input: syz0 as /devices/virtual/input/input9 [ 83.923546][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.940309][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.066375][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.071107][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.075111][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.079087][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.083150][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.085910][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.090335][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.191311][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 84.248075][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.250834][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.253437][ T6883] bridge_slave_0: entered allmulticast mode [ 84.256145][ T6883] bridge_slave_0: entered promiscuous mode [ 84.259343][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.261993][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.264349][ T6883] bridge_slave_1: entered allmulticast mode [ 84.267042][ T6883] bridge_slave_1: entered promiscuous mode [ 84.294838][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.299654][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.330029][ T6883] team0: Port device team_slave_0 added [ 84.333680][ T6883] team0: Port device team_slave_1 added [ 84.353757][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.355724][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.363493][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.367175][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.369026][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.377852][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.410392][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.416203][ T6883] hsr_slave_0: entered promiscuous mode [ 84.418850][ T6883] hsr_slave_1: entered promiscuous mode [ 84.423293][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.425228][ T6883] Cannot create hsr debugfs directory [ 84.514689][ T6894] No control pipe specified [ 84.594960][ T6898] netlink: 256 bytes leftover after parsing attributes in process `syz.1.244'. [ 84.970378][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.992192][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 84.999608][ T6907] unsupported nlmsg_type 40 [ 85.130335][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.232824][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 85.235180][ T6945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.252'. [ 85.237663][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 85.240355][ T6945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.252'. [ 85.242679][ T6945] netlink: 104 bytes leftover after parsing attributes in process `syz.1.252'. [ 85.352824][ T6947] input: syz0 as /devices/virtual/input/input10 [ 85.403243][ T6907] orangefs_mount: mount request failed with -4 [ 85.450481][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.613493][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.688394][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 85.690992][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.255'. [ 85.731729][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.840540][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.952634][ T68] bridge_slave_1: left allmulticast mode [ 85.954755][ T68] bridge_slave_1: left promiscuous mode [ 85.956552][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.961618][ T68] bridge_slave_0: left allmulticast mode [ 85.963093][ T68] bridge_slave_0: left promiscuous mode [ 85.964994][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.020582][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.067733][ T6971] netlink: 'syz.0.260': attribute type 8 has an invalid length. [ 86.123691][ T64] IPVS: starting estimator thread 0... [ 86.180322][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.182231][ T5973] Bluetooth: hci3: command tx timeout [ 86.210637][ T6977] IPVS: using max 38 ests per chain, 91200 per kthread [ 86.213805][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.219746][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.224053][ T68] bond0 (unregistering): Released all slaves [ 86.246657][ T6976] tipc: Started in network mode [ 86.248634][ T6976] tipc: Node identity ac1414aa, cluster identity 4711 [ 86.252078][ T6976] tipc: Enabled bearer , priority 10 [ 86.706927][ T68] hsr_slave_0: left promiscuous mode [ 86.709476][ T68] hsr_slave_1: left promiscuous mode [ 86.713264][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.715323][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.719016][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.724241][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.758963][ T68] veth1_macvtap: left promiscuous mode [ 86.762791][ T68] veth0_macvtap: left promiscuous mode [ 86.766070][ T68] veth1_vlan: left promiscuous mode [ 86.767694][ T68] veth0_vlan: left promiscuous mode [ 87.365283][ T7017] input: syz0 as /devices/virtual/input/input11 [ 87.391467][ T5847] tipc: Node number set to 2886997162 [ 87.564000][ T68] team0 (unregistering): Port device team_slave_1 removed [ 87.612826][ T7021] input: syz0 as /devices/virtual/input/input12 [ 87.652746][ T68] team0 (unregistering): Port device team_slave_0 removed [ 88.260879][ T5973] Bluetooth: hci3: command tx timeout [ 88.297892][ T6883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.305950][ T6883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.312053][ T6883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.316524][ T6883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.401961][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.408788][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.417489][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.419452][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.428232][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.430176][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.524213][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.544558][ T6883] veth0_vlan: entered promiscuous mode [ 88.549354][ T6883] veth1_vlan: entered promiscuous mode [ 88.564281][ T6883] veth0_macvtap: entered promiscuous mode [ 88.568052][ T6883] veth1_macvtap: entered promiscuous mode [ 88.575664][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.579000][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.580334][ C2] net_ratelimit: 17 callbacks suppressed [ 88.580348][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 88.582190][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.597109][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.607495][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.623175][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.626197][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.629163][ T6883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.632444][ T6883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.640659][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.648971][ T6883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.656935][ T6883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.659190][ T6883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.662067][ T6883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.693104][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.695142][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.710850][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.712817][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.994010][ T7056] __nla_validate_parse: 10 callbacks suppressed [ 88.994045][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 88.998203][ T7056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.278'. [ 89.000762][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 89.003827][ T7056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.278'. [ 89.006328][ T7056] netlink: 104 bytes leftover after parsing attributes in process `syz.3.278'. [ 89.054967][ T7058] netlink: 256 bytes leftover after parsing attributes in process `syz.1.279'. [ 89.140296][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.291803][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.370355][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.555066][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.281'. [ 89.610283][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.891454][ T7091] input: syz0 as /devices/virtual/input/input13 [ 90.034886][ T7093] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 90.047818][ T7093] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 90.170422][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.231638][ T7078] evm: overlay not supported [ 90.330356][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.420407][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.650306][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.768191][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.818296][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 90.824958][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.292'. [ 90.831606][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 90.988982][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.992247][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.994507][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.997240][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.999779][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.003610][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.068685][ T7125] chnl_net:caif_netlink_parms(): no params data found [ 91.108615][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.110439][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.112120][ T7125] bridge_slave_0: entered allmulticast mode [ 91.113921][ T7125] bridge_slave_0: entered promiscuous mode [ 91.116262][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.117874][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.119534][ T7125] bridge_slave_1: entered allmulticast mode [ 91.122314][ T7125] bridge_slave_1: entered promiscuous mode [ 91.152530][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.156220][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.180567][ T7125] team0: Port device team_slave_0 added [ 91.183372][ T7125] team0: Port device team_slave_1 added [ 91.215152][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.216945][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.220315][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 91.222975][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.229074][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.233090][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.233105][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.257974][ T7125] hsr_slave_0: entered promiscuous mode [ 91.259827][ T7125] hsr_slave_1: entered promiscuous mode [ 91.262790][ T7125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.264642][ T7125] Cannot create hsr debugfs directory [ 91.458735][ T7141] can0: slcan on ttyS3. [ 91.474478][ T7148] netlink: 'syz.0.297': attribute type 13 has an invalid length. [ 91.476629][ T7148] netlink: 'syz.0.297': attribute type 12 has an invalid length. [ 91.559586][ T7150] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32769) [ 91.580650][ T7150] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 91.665707][ T39] audit: type=1800 audit(1732699702.550:4): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file0" dev="9p" ino=35922787 res=0 errno=0 [ 91.736662][ T7153] netfs: Couldn't get user pages (rc=-14) [ 91.783673][ T7163] FAULT_INJECTION: forcing a failure. [ 91.783673][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 91.787604][ T7163] CPU: 1 UID: 0 PID: 7163 Comm: syz.0.301 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 91.790376][ T7163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.792788][ T7163] Call Trace: [ 91.793549][ T7163] [ 91.794240][ T7163] dump_stack_lvl+0x16c/0x1f0 [ 91.795322][ T7163] should_fail_ex+0x497/0x5b0 [ 91.796407][ T7163] ? fs_reclaim_acquire+0xae/0x150 [ 91.797610][ T7163] should_failslab+0xc2/0x120 [ 91.798745][ T7163] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 91.800178][ T7163] ? kvrealloc_noprof+0x60/0x150 [ 91.801324][ T7163] krealloc_noprof+0x157/0x360 [ 91.802446][ T7163] kvrealloc_noprof+0x60/0x150 [ 91.803560][ T7163] push_insn_history+0x2ac/0x690 [ 91.804706][ T7163] do_check_common+0xb78/0xd540 [ 91.805884][ T7163] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 91.807358][ T7163] ? __pfx_do_check_common+0x10/0x10 [ 91.808571][ T7163] ? kvfree+0x47/0x50 [ 91.809512][ T7163] ? check_cfg+0x403/0x840 [ 91.810597][ T7163] bpf_check+0x77c2/0xc9b0 [ 91.811627][ T7163] ? hlock_class+0x4e/0x130 [ 91.812672][ T7163] ? __pfx_bpf_check+0x10/0x10 [ 91.813776][ T7163] ? find_held_lock+0x2d/0x110 [ 91.814874][ T7163] ? bpf_prog_load+0xd45/0x2670 [ 91.816177][ T7163] ? __pfx_lock_release+0x10/0x10 [ 91.817362][ T7163] ? trace_lock_acquire+0x146/0x1e0 [ 91.818543][ T7163] ? bpf_prog_load+0xd45/0x2670 [ 91.819635][ T7163] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.820799][ T7163] ? read_tsc+0x9/0x20 [ 91.821756][ T7163] ? ktime_get_with_offset+0x20f/0x3a0 [ 91.822989][ T7163] ? bpf_obj_name_cpy+0x156/0x1b0 [ 91.824146][ T7163] bpf_prog_load+0xe3f/0x2670 [ 91.825218][ T7163] ? __pfx_bpf_prog_load+0x10/0x10 [ 91.826403][ T7163] ? find_held_lock+0x2d/0x110 [ 91.827529][ T7163] ? __might_fault+0x13b/0x190 [ 91.828640][ T7163] ? __might_fault+0xe3/0x190 [ 91.829715][ T7163] __sys_bpf+0x5677/0x57a0 [ 91.830763][ T7163] ? __pfx_lock_release+0x10/0x10 [ 91.831944][ T7163] ? __pfx___sys_bpf+0x10/0x10 [ 91.833067][ T7163] ? vfs_write+0x306/0x1150 [ 91.834092][ T7163] ? __mutex_unlock_slowpath+0x164/0x690 [ 91.835507][ T7163] ? fput+0x67/0x440 [ 91.836571][ T7163] ? ksys_write+0x1ba/0x250 [ 91.837620][ T7163] ? __pfx_ksys_write+0x10/0x10 [ 91.838729][ T7163] __ia32_sys_bpf+0x76/0xe0 [ 91.839765][ T7163] __do_fast_syscall_32+0x73/0x120 [ 91.840983][ T7163] do_fast_syscall_32+0x32/0x80 [ 91.842139][ T7163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.843624][ T7163] RIP: 0023:0xf742e579 [ 91.844589][ T7163] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.849029][ T7163] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 91.850997][ T7163] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 91.852847][ T7163] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.854686][ T7163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.856535][ T7163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.858373][ T7163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.860222][ T7163] [ 92.149802][ T7172] 9pnet_fd: Insufficient options for proto=fd [ 92.270916][ T7137] can0 (unregistered): slcan off ttyS3. [ 92.315585][ T7180] FAULT_INJECTION: forcing a failure. [ 92.315585][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 92.318831][ T7180] CPU: 2 UID: 0 PID: 7180 Comm: syz.1.306 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 92.321542][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.324378][ T7180] Call Trace: [ 92.325251][ T7180] [ 92.326025][ T7180] dump_stack_lvl+0x16c/0x1f0 [ 92.327266][ T7180] should_fail_ex+0x497/0x5b0 [ 92.328526][ T7180] ? fs_reclaim_acquire+0xae/0x150 [ 92.329874][ T7180] should_failslab+0xc2/0x120 [ 92.331125][ T7180] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 92.332618][ T7180] ? lock_acquire.part.0+0x11b/0x380 [ 92.333996][ T7180] ? __d_alloc+0x35/0x8c0 [ 92.335131][ T7180] __d_alloc+0x35/0x8c0 [ 92.336216][ T7180] d_alloc_pseudo+0x1c/0xc0 [ 92.337394][ T7180] alloc_file_pseudo+0xd2/0x200 [ 92.338664][ T7180] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 92.340093][ T7180] ? alloc_fd+0x41f/0x760 [ 92.341226][ T7180] sock_alloc_file+0x50/0x1d0 [ 92.342476][ T7180] __sys_socket+0x1c2/0x260 [ 92.343691][ T7180] ? __might_fault+0xe3/0x190 [ 92.344930][ T7180] ? __pfx___sys_socket+0x10/0x10 [ 92.346258][ T7180] ? __might_fault+0xe3/0x190 [ 92.347544][ T7180] __do_compat_sys_socketcall+0x57e/0x700 [ 92.349040][ T7180] ? __fget_files+0x206/0x3a0 [ 92.350287][ T7180] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 92.351931][ T7180] ? fput+0x67/0x440 [ 92.352976][ T7180] __do_fast_syscall_32+0x73/0x120 [ 92.354325][ T7180] do_fast_syscall_32+0x32/0x80 [ 92.355620][ T7180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.357272][ T7180] RIP: 0023:0xf73de579 [ 92.358348][ T7180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.363578][ T7180] RSP: 002b:00000000f50c54d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 92.365706][ T7180] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f50c54e0 [ 92.367750][ T7180] RDX: 00000000f73d0ff4 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.369810][ T7180] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 92.371881][ T7180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.373924][ T7180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.375987][ T7180] [ 92.725381][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.801616][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.811343][ T64] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.882624][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.983173][ T64] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.986056][ T64] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.989093][ T64] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.992373][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.994290][ T12] bridge_slave_1: left allmulticast mode [ 92.995942][ T12] bridge_slave_1: left promiscuous mode [ 92.997458][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.002300][ T7187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.005949][ T12] bridge_slave_0: left allmulticast mode [ 93.007467][ T12] bridge_slave_0: left promiscuous mode [ 93.009052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.010918][ T64] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.060387][ T5973] Bluetooth: hci3: command tx timeout [ 93.069933][ T7193] input: syz0 as /devices/virtual/input/input16 [ 93.238995][ T30] usb 6-1: USB disconnect, device number 6 [ 93.319747][ T7197] input: syz0 as /devices/virtual/input/input17 [ 93.352864][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.356310][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.359359][ T12] bond0 (unregistering): Released all slaves [ 93.643116][ T12] hsr_slave_0: left promiscuous mode [ 93.644911][ T12] hsr_slave_1: left promiscuous mode [ 93.647285][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.648963][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.651235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.653020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.671830][ T12] veth1_macvtap: left promiscuous mode [ 93.673353][ T12] veth0_macvtap: left promiscuous mode [ 93.674686][ T12] veth1_vlan: left promiscuous mode [ 93.675928][ T12] veth0_vlan: left promiscuous mode [ 93.749522][ T7217] FAULT_INJECTION: forcing a failure. [ 93.749522][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.753144][ T7217] CPU: 2 UID: 0 PID: 7217 Comm: syz.0.312 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 93.755762][ T7217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.758524][ T7217] Call Trace: [ 93.759405][ T7217] [ 93.760174][ T7217] dump_stack_lvl+0x16c/0x1f0 [ 93.761398][ T7217] should_fail_ex+0x497/0x5b0 [ 93.762625][ T7217] _copy_to_user+0x32/0xd0 [ 93.763764][ T7217] __htab_map_lookup_and_delete_batch+0x17b3/0x2870 [ 93.765490][ T7217] ? __fget_files+0x1fc/0x3a0 [ 93.766717][ T7217] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 93.768468][ T7217] ? __fget_files+0x206/0x3a0 [ 93.769691][ T7217] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 93.771406][ T7217] bpf_map_do_batch+0x294/0x640 [ 93.772649][ T7217] __sys_bpf+0x5581/0x57a0 [ 93.773792][ T7217] ? __pfx_lock_release+0x10/0x10 [ 93.775093][ T7217] ? __pfx___sys_bpf+0x10/0x10 [ 93.776323][ T7217] ? vfs_write+0x306/0x1150 [ 93.777502][ T7217] ? __mutex_unlock_slowpath+0x164/0x690 [ 93.778958][ T7217] ? fput+0x67/0x440 [ 93.779999][ T7217] ? ksys_write+0x1ba/0x250 [ 93.781181][ T7217] ? __pfx_ksys_write+0x10/0x10 [ 93.782436][ T7217] __ia32_sys_bpf+0x76/0xe0 [ 93.783597][ T7217] __do_fast_syscall_32+0x73/0x120 [ 93.784892][ T7217] do_fast_syscall_32+0x32/0x80 [ 93.786161][ T7217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.787793][ T7217] RIP: 0023:0xf742e579 [ 93.788840][ T7217] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.793820][ T7217] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 93.795942][ T7217] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000020000800 [ 93.797944][ T7217] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.799950][ T7217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.802009][ T7217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 93.804043][ T7217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.806080][ T7217] [ 93.807174][ C2] net_ratelimit: 10 callbacks suppressed [ 93.807183][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 93.922941][ T7223] ======================================================= [ 93.922941][ T7223] WARNING: The mand mount option has been deprecated and [ 93.922941][ T7223] and is ignored by this kernel. Remove the mand [ 93.922941][ T7223] option from the mount to silence this warning. [ 93.922941][ T7223] ======================================================= [ 93.935769][ T7223] overlay: Unknown parameter 'uid>00000000000000000000' [ 94.180529][ T5847] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.198490][ T7232] netlink: 'syz.3.316': attribute type 2 has an invalid length. [ 94.310482][ T5847] usb 6-1: device descriptor read/64, error -71 [ 94.340353][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.500325][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.520457][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.564023][ T5847] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 94.570378][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.601730][ T12] team0 (unregistering): Port device team_slave_0 removed [ 94.693290][ T5847] usb 6-1: device descriptor read/64, error -71 [ 94.800487][ T5847] usb usb6-port1: attempt power cycle [ 94.820270][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.140394][ T5973] Bluetooth: hci3: command tx timeout [ 95.152514][ T5847] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 95.184983][ T5847] usb 6-1: device descriptor read/8, error -71 [ 95.200681][ T7229] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 95.204096][ T7229] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 95.206894][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.3.316 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 95.210356][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.213167][ T7229] RIP: 0010:dev_prep_valid_name.constprop.0+0x19b/0x630 [ 95.214967][ T7229] Code: 85 c0 48 89 44 24 18 0f 84 f0 03 00 00 e8 5d cb 95 f8 48 8d 93 68 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <80> 3c 01 00 0f 85 6c 04 00 00 48 8b 83 68 02 00 00 4c 8d a8 a8 fe SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 95.219948][ T7229] RSP: 0018:ffffc900044e6ee8 EFLAGS: 00010203 [ 95.221801][ T7229] RAX: dffffc0000000000 RBX: fffffffffffffffd RCX: 000000000000004c [ 95.223843][ T7229] RDX: 0000000000000265 RSI: ffffffff88f82ea3 RDI: ffffffff8da3aba0 [ 95.225912][ T7229] RBP: 1ffff9200089cde6 R08: 0000000000000920 R09: 00000000ffffffff [ 95.227975][ T7229] R10: ffffffff96beecd7 R11: 0000000000000002 R12: ffff8880692fe120 [ 95.230046][ T7229] R13: ffff8880692fe124 R14: 0000000000000011 R15: 0000000000000064 [ 95.232108][ T7229] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5136b40 [ 95.234522][ T7229] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 95.236210][ T7229] CR2: 00000000f5220132 CR3: 000000006b4e0000 CR4: 0000000000352ef0 [ 95.238279][ T7229] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.240351][ T7229] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.242415][ T7229] Call Trace: [ 95.243292][ T7229] [ 95.244078][ T7229] ? die_addr+0x3b/0xa0 [ 95.245167][ T7229] ? exc_general_protection+0x155/0x230 [ 95.246636][ T7229] ? asm_exc_general_protection+0x26/0x30 [ 95.248135][ T7229] ? dev_prep_valid_name.constprop.0+0x183/0x630 [ 95.249783][ T7229] ? dev_prep_valid_name.constprop.0+0x19b/0x630 [ 95.251432][ T7229] ? dev_prep_valid_name.constprop.0+0x183/0x630 [ 95.253068][ T7229] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 95.254806][ T7229] ? lockdep_init_map_type+0x16d/0x7d0 [ 95.256285][ T7229] ? lockdep_init_map_type+0x16d/0x7d0 [ 95.257702][ T7229] register_netdevice+0x4b6/0x1e20 [ 95.259046][ T7229] ? __pfx_register_netdevice+0x10/0x10 [ 95.260493][ T7229] ? dev_addr_mod+0x2c9/0x390 [ 95.261714][ T7229] veth_newlink+0x2a7/0xa30 [ 95.262913][ T7229] ? netlink_rcv_skb+0x165/0x410 [ 95.264216][ T7229] ? __pfx_veth_newlink+0x10/0x10 [ 95.265531][ T7229] ? ___sys_sendmsg+0x135/0x1e0 [ 95.266807][ T7229] ? read_word_at_a_time+0xe/0x20 [ 95.268123][ T7229] ? validate_linkmsg+0x57d/0xb60 [ 95.269468][ T7229] ? sized_strscpy+0xae/0x290 [ 95.270711][ T7229] ? __pfx_validate_linkmsg+0x10/0x10 [ 95.272065][ T7229] ? alloc_netdev_mqs+0xfa0/0x1320 [ 95.273364][ T7229] ? rtnl_create_link+0xa2e/0xf10 [ 95.274618][ T7229] rtnl_newlink+0x11ad/0x1c10 [ 95.275807][ T7229] ? __pfx_veth_newlink+0x10/0x10 [ 95.277026][ T7229] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.278278][ T7229] ? __pfx___lock_acquire+0x10/0x10 [ 95.279560][ T7229] ? kmem_cache_free+0x152/0x4c0 [ 95.280781][ T7229] ? aa_get_newest_label+0x376/0x680 [ 95.282090][ T7229] ? find_held_lock+0x2d/0x110 [ 95.283300][ T7229] ? find_held_lock+0x2d/0x110 [ 95.284522][ T7229] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 95.285776][ T7229] ? __pfx_lock_release+0x10/0x10 [ 95.286978][ T7229] ? trace_lock_acquire+0x146/0x1e0 [ 95.288225][ T7229] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.289436][ T7229] rtnetlink_rcv_msg+0x95b/0xea0 [ 95.290650][ T7229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.291997][ T7229] ? __pfx___dev_queue_xmit+0x10/0x10 [ 95.293322][ T7229] netlink_rcv_skb+0x165/0x410 [ 95.294492][ T7229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.295826][ T7229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.297094][ T7229] ? netlink_deliver_tap+0x1ae/0xca0 [ 95.298372][ T7229] netlink_unicast+0x53c/0x7f0 [ 95.299543][ T7229] ? __pfx_netlink_unicast+0x10/0x10 [ 95.300924][ T7229] ? __phys_addr_symbol+0x30/0x80 [ 95.302148][ T7229] ? __check_object_size+0x488/0x710 [ 95.303490][ T7229] netlink_sendmsg+0x8b8/0xd70 [ 95.304641][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.305943][ T7229] ____sys_sendmsg+0x9ae/0xb40 [ 95.307133][ T7229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.308440][ T7229] ? get_compat_msghdr+0x11b/0x170 [ 95.309707][ T7229] ___sys_sendmsg+0x135/0x1e0 [ 95.310959][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.312327][ T7229] ? __pfx_lock_release+0x10/0x10 [ 95.313583][ T7229] ? trace_lock_acquire+0x146/0x1e0 [ 95.314860][ T7229] ? __fget_files+0x206/0x3a0 [ 95.316065][ T7229] __sys_sendmsg+0x16e/0x220 [ 95.317215][ T7229] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.318500][ T7229] ? __ia32_sys_futex_time32+0x1da/0x460 [ 95.319974][ T7229] __do_fast_syscall_32+0x73/0x120 [ 95.321233][ T7229] do_fast_syscall_32+0x32/0x80 [ 95.322471][ T7229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.324075][ T7229] RIP: 0023:0xf7fb3579 [ 95.325066][ T7229] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.329990][ T7229] RSP: 002b:00000000f513657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 95.332135][ T7229] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 95.334237][ T7229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.336371][ T7229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.338494][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.340631][ T7229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.342693][ T7229] [ 95.343534][ T7229] Modules linked in: [ 95.344972][ T7229] ---[ end trace 0000000000000000 ]--- [ 95.355646][ T7229] RIP: 0010:dev_prep_valid_name.constprop.0+0x19b/0x630 [ 95.357604][ T7229] Code: 85 c0 48 89 44 24 18 0f 84 f0 03 00 00 e8 5d cb 95 f8 48 8d 93 68 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <80> 3c 01 00 0f 85 6c 04 00 00 48 8b 83 68 02 00 00 4c 8d a8 a8 fe [ 95.363527][ T7229] RSP: 0018:ffffc900044e6ee8 EFLAGS: 00010203 [ 95.365478][ T7229] RAX: dffffc0000000000 RBX: fffffffffffffffd RCX: 000000000000004c [ 95.369183][ T7229] RDX: 0000000000000265 RSI: ffffffff88f82ea3 RDI: ffffffff8da3aba0 [ 95.372090][ T7229] RBP: 1ffff9200089cde6 R08: 0000000000000920 R09: 00000000ffffffff [ 95.374846][ T7229] R10: ffffffff96beecd7 R11: 0000000000000002 R12: ffff8880692fe120 [ 95.376935][ T7229] R13: ffff8880692fe124 R14: 0000000000000011 R15: 0000000000000064 [ 95.379010][ T7229] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5136b40 [ 95.380288][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.381416][ T7229] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 95.384891][ T7229] CR2: 00000000f5220132 CR3: 000000006b4e0000 CR4: 0000000000352ef0 [ 95.386972][ T7229] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.389049][ T7229] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.391183][ T7229] Kernel panic - not syncing: Fatal exception [ 95.393325][ T7229] Kernel Offset: disabled [ 95.394471][ T7229] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:28:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85099925 RDI=ffffffff9a89e200 RBP=ffffffff9a89e1c0 RSP=ffffc900044e68c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff850998c0 R15=0000000000000000 RIP=ffffffff8509994f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5220132 CR3=000000006b4e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b53fdc0 RCX=ffffffff818219f4 RDX=ffff88801ced8000 RSI=ffffffff818219cf RDI=0000000000000005 RBP=ffffc9000045fd78 RSP=ffffc9000045fca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bf8c2e R12=1ffff9200008bf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056a7fb9 RIP=ffffffff818219d5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000584fc4c0 CR3=0000000064b34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffffbfff207c952 RBX=fffffbfff207c953 RCX=ffffffff816a07cc RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff903e4a90 RBP=fffffbfff207c952 RSP=ffffc900031bf6d0 R8 =0000000000000000 R9 =fffffbfff207c952 R10=ffffffff903e4a97 R11=0000000000000000 R12=0000000000000000 R13=000000000003d90c R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81f0a784 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000000dd7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973e0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000179a3c RBX=0000000000000003 RCX=ffffffff8b204bc9 RDX=ffffed10056e6fee RSI=ffffffff8bd163a0 RDI=ffffffff8164d9b9 RBP=ffffed10039de488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cef2440 R14=ffffffff903e4a90 R15=0000000000000000 RIP=ffffffff8b205faf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8321b48bd0 CR3=00000000642ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000