last executing test programs: 7.277952128s ago: executing program 0 (id=369): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() (async) r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r3, &(0x7f0000000740)=""/384, 0x200008c0) (async) r4 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000082505a8a444000102030109022400010101003009040000010701020309050102000208032a09058202a7030d0104"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x0, 0x4, 0xa, 0x8, 0x4}, 0x93, &(0x7f0000000480)={0x5, 0xf, 0x93, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd63647ecc64e9fa1, 0x6, 0x1, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b254de832f50aab8d403e51b4c1e2080"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x9515, 0xf0f, 0x82, [0xc030]}, @generic={0x45, 0x10, 0xa, "9b64de44c9e75b0323ca10ff62e51896cbc00cbcf6bedc5364334e26e34a797250b7790d7f9382b75db6275d5923c47f013161ebc6ce9f50e2222bf1db6877290c07"}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x8, 0xf00, 0x9, [0xff000f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7, 0x2, 0x4, 0x2}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_disconnect(r4) (async) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) (async) r5 = socket(0x10, 0x802, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r5, &(0x7f0000000000)="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", 0xfc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.276956602s ago: executing program 0 (id=370): read$msr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40015b13, 0x0) 4.978663241s ago: executing program 2 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x149) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80020, &(0x7f0000000040)={[{@huge_within_size}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) chdir(&(0x7f0000000000)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000"], 0x878) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113900000000000400000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x2e, 0x4608, @void}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x169440, 0x11) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='coredump_filter\x00') wait4(r0, 0x0, 0x1, 0x0) 4.228572102s ago: executing program 0 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) connect$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x6) 3.888983915s ago: executing program 2 (id=387): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000cab000)=0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f0000000040)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000080)=ANY=[], 0xfdef) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) 3.658638076s ago: executing program 2 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0xba, &(0x7f0000000240)=ANY=[@ANYBLOB="015dc2000003b153784ff6fa0805037b0fae9f3eb3030a983990f4152f8510d597dcbc7f61a1d3bfe5c297a1a400dee4972dccc110017dfd6069fac6ab96cabc1fb3adf6e4937fe274ade3f90805000000cf29edcca2c99a02a71705e5fb9899ffb7b6ac4003fb13fcfadd3d8e85a30d00516ca2e448687b64dfef017e7021a14a2187fb996395ad96eb9a34feb8ac93f38c5fc7af73106753c2c10baf9d0f4f3c79cff77f41a53e5184f404000000000000034e6bce71b50df8"], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8e000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18}, 0x18}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000500)="66b9800000c00f326635000100000f3066b9800000c00f326635002000000f30660f38dc386766c7442400fbffffff6766c7442402be7000006766c744240600000000670f0114240f22c20f229bd9e5660f3acff510dbc50f0b", 0x5a}], 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000300), 0x501300, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x0, 0xd5e9, 0x8}) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x20, r8, 0x800, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf7}]}]}, 0x20}}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) dup3(r6, r5, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.588004447s ago: executing program 2 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000380)='contention_end\x00', r3}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r9, 0x89e8) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x4b45, 0x3) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x6) ioctl$NBD_DISCONNECT(r8, 0xab08) ioctl$NBD_CLEAR_SOCK(r6, 0x125f) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="01030000fe230000000005000000"], 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000008044ac0b2d22ab8a9ca30383bf310c892cdee4bba7f9c001c32eb362bd697f253c79b848192074a8eea90cf7b3ca478072d8dc7f80ff8701876b327290825366ae5b71e53ceb7a1b9d68d144cd41a30d8cfd42a208000000a7eb145008cfc4adf8d087d48ffa9e3b493065675a4eef1ba6cab75081aa2ebd87b59fb6472f56240a", @ANYRESHEX=r11, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0xc12158d70d197882}, 0x400c890) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000000faff", @ANYRES64], 0x40}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 3.327429443s ago: executing program 0 (id=391): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x710, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x2}, 0x8, 0x4, 0xffff, 0x9, 0xb, 'syz1\x00', "c7b86c72a133d94022500686a8ebdd14b9fb2fe11525f9e99f2ec03127844a6c", "f48f88aac52f92d4177206f4d36b4566529067a10af87958f41f8b0ed58049c1", [{0x8001, 0xf001, {0x1, 0x9}}, {0xb, 0xf, {0x1, 0x8}}, {0x6, 0x4, {0x3, 0x8000}}, {0x400, 0x6, {0x0, 0x5}}, {0x0, 0x0, {0x2, 0x9}}, {0x3, 0x1800, {0x3, 0x1}}, {0x3, 0x8, {0x1, 0x4}}, {0x0, 0x5, {0x0, 0x4}}, {0x7, 0x200, {0x2, 0x5e}}, {0x1, 0x9c, {0x2}}, {0x1, 0x5, {0x3, 0x2}}, {0xfffc, 0x1, {0x0, 0x800}}, {0x3, 0x0, {0x1, 0x18}}, {0xd665, 0x2, {0x0, 0xdae}}, {0x80, 0xff0, {0x1, 0x5}}, {0x328c, 0x4704, {0x2, 0x87a5}}, {0x5, 0xceab, {0x3, 0x2}}, {0x3, 0x2, {0x0, 0xf60af58}}, {0x7fff, 0x0, {0x1, 0x2}}, {0x8, 0xe9cf, {0x1, 0xe012}}, {0x3, 0x1ff, {0x1, 0x2}}, {0x8, 0x7, {0x3, 0x6}}, {0x8cc9, 0x7, {0x1, 0x24c}}, {0x4, 0x6, {0x0, 0x2}}, {0x7, 0xe, {0x0, 0x8}}, {0xfff7, 0x5, {0x1, 0x2}}, {0x0, 0x0, {0x1, 0x7}}, {0xb, 0x1, {0x2, 0x2}}, {0xb, 0x9, {0x1, 0x186}}, {0x8000, 0xfffc, {0x3, 0x240000}}, {0xc620, 0x8, {0x3, 0x113}}, {0x8, 0xb, {0x2, 0x1}}, {0x9, 0xb, {0x2, 0x7e2aaad4}}, {0xd7, 0x8001, {0x1, 0x2}}, {0x1, 0x2, {0x3, 0xfffffff9}}, {0xd, 0x7, {0x3, 0x5}}, {0x2, 0x7c3, {0x0, 0x40}}, {0xfffa, 0x9, {0x0, 0x5}}, {0xb, 0x3}, {0x400, 0x40, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffffe}, 0x7, 0x40, 0x4, 0xe, 0x8, 'syz1\x00', "de3a1d2ef9ea8781d534e0b296e98ce24b732c81ed9cfab9ea386a88d1635bb7", "b9b48f710b8c2586ee2f7e2ae135516dfa245c8b58fb8cffa175fa0329bf4e0e", [{0x8001, 0x1, {0x2, 0x9}}, {0x8aa, 0x1, {0x1, 0x7b3e}}, {0x2, 0x1ff, {0x0, 0x10000}}, {0x10, 0x48, {0x2, 0x2d75dbb3}}, {0x7ff, 0x7fff, {0x3, 0x100c72ce}}, {0x40, 0x7, {0x0, 0x9}}, {0x80, 0x80, {0x3, 0xffff}}, {0x7, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x2, 0x8d1}}, {0x1000, 0x8000, {0x2}}, {0x7, 0x4, {0x2, 0x1}}, {0x9, 0x4, {0x0, 0x4}}, {0x5, 0x1, {0x2, 0xc5}}, {0x800, 0x10, {0x2, 0x6}}, {0x6b89, 0x7ff, {0x2, 0x2}}, {0x8001, 0x800, {0x3, 0x7}}, {0xfffe, 0x6, {0x3, 0x5}}, {0xfa, 0x5, {0x0, 0x8}}, {0x3, 0x2, {0x0, 0x1}}, {0x8, 0x9, {0x0, 0x75f}}, {0x8, 0x4, {0x0, 0x80000000}}, {0x7, 0x4, {0x1, 0x1000}}, {0x36f, 0x4, {0x1, 0x6}}, {0x3, 0x2, {0x3, 0x80000000}}, {0x5, 0x81, {0x3, 0x10}}, {0xcf, 0x8, {0x2, 0x7fffffff}}, {0xf4d7, 0x491, {0x2}}, {0xfffa, 0x700, {0x3, 0xfffffffc}}, {0x1, 0x2, {0x0, 0x2}}, {0x5, 0x3}, {0x5, 0x0, {0x2, 0x9}}, {0x5, 0x2, {0x3, 0x10}}, {0x1000, 0x400, {0x3, 0x2}}, {0x9, 0x8, {0x2, 0xb}}, {0x2, 0x6, {0x2, 0x3}}, {0x3, 0x6, {0x2, 0x80}}, {0x9, 0xef, {0x0, 0x3}}, {0x1, 0x3, {0x2}}, {0x3ff, 0xf6, {0x2, 0x400}}, {0x1, 0x4, {0x2, 0x3e}}]}}}, {{0x254, 0x1, {{0x1}, 0x4, 0x0, 0x2, 0x40, 0xfffd, 'syz1\x00', "30af8cf59c1fda4b0785757cecf9a43a8adf228309de8ef077ed9cf63c059c63", "ab18cec988818ef37b0570a6966b6ed2c697d551ac9bc94a9e2f10f4e8e53ed3", [{0x6, 0xff, {0x3, 0x1}}, {0x3, 0x8000}, {0x5, 0x5, {0x3, 0xffffffff}}, {0x0, 0x2, {0x1, 0x1}}, {0x7, 0x5, {0x3}}, {0x8, 0x2, {0x1, 0x100}}, {0xc, 0x9, {0x3, 0x1}}, {0x0, 0x9, {0x3, 0x82}}, {0x8, 0x5, {0x2, 0x100}}, {0x8, 0x3, {0x1}}, {0x6, 0x4, {0x1, 0x1}}, {0x4, 0x1, {0x1, 0x4}}, {0x9, 0x0, {0x3, 0x85}}, {0x5, 0x2}, {0x92, 0x200, {0x1, 0x101}}, {0x3, 0x3, {0x1, 0x240}}, {0xfff9, 0x2, {0x3, 0x9}}, {0x0, 0x0, {0x2, 0x9}}, {0x97, 0xfff9, {0x3, 0xbb}}, {0x0, 0xbce, {0x1, 0xf4}}, {0x4, 0x5, {0x1, 0x6}}, {0x20c, 0x8, {0x1}}, {0x5, 0x809, {0x1, 0x4}}, {0x1, 0xffff, {0x0, 0x5}}, {0xab, 0x4, {0x2}}, {0x2, 0x6, {0x2, 0x7}}, {0x400, 0x8001, {0x2, 0x9e}}, {0x1, 0x4, {0x3, 0xf}}, {0x94e5, 0x2, {0x3}}, {0xffff, 0x6, {0x2, 0x6}}, {0x4, 0xd0f, {0x1, 0x81}}, {0x5, 0x9, {0x2, 0xc93c}}, {0x7, 0x8, {0x3, 0xfff}}, {0x9, 0x2, {0x0, 0x6231ec73}}, {0x9, 0x0, {0x0, 0x4}}, {0x9, 0x7, {0x1, 0xf7}}, {0x6, 0x6324, {0x1, 0x6}}, {0x0, 0xca3, {0x0, 0x6}}, {0x7, 0xa, {0x3, 0x8}}, {0x35b, 0x400, {0x2, 0x10001}}]}}}]}, 0x710}}, 0x4000) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x17c, 0x0, 0x17c, 0xffffffff, 0xffffffff, 0x234, 0x234, 0x234, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x18, 0x40}}}, {{@uncond, 0x0, 0xc4, 0xe8, 0x0, {}, [@common=@ah={{0x2c}, {[0x0, 0x7551], 0x1}}, @common=@inet=@tcpmss={{0x28}, {0x5, 0x63a, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x324) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab97fc979fd1e00d96072000001ea89de2b7fb0900000080b8785d9600010000000000eeffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177c54e98dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x1000000]}}) 3.248632235s ago: executing program 0 (id=393): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @aes128, 0x0, @desc4}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x202, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002200f2ff090001007770616e31"], 0x20}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "118c625839d9ae18ca93f41576cc466081f3dd7c7e3520a0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x2c000004) dup(r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x35303553, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x1}}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x123000, 0x0) ioctl$TIOCGPGRP(r10, 0x540f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) 3.23837936s ago: executing program 2 (id=394): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) epoll_create1(0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000007f27cc1c389b91cc0000020003000000"], 0x14}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') fchdir(r3) write$P9_RSETATTR(r3, 0x0, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x1, 0x4000000b, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x2, 0x8001020, 0xffffffffffffffff, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001008010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800a00010071756575650000001400028006000140084e00000800044000000011140000001100010000000000000000000100000a"], 0x7c}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.909745201s ago: executing program 0 (id=398): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x7f, 0x1, 0x0, "fa6a45f59a0a19972206f16bfcd9fd6243b2da50e5ec28a383e77ea33f0fdcba"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {&(0x7f0000001e80)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd741206042", 0x8c}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setreuid(0x0, r4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xfffffffffffffffa}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.8198313s ago: executing program 1 (id=399): read$msr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x23b, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40015b13, 0x0) 1.755972209s ago: executing program 3 (id=400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) connect$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x6) 879.208514ms ago: executing program 3 (id=401): r0 = mq_open(0x0, 0x2, 0x2d9c3c99e3b076ec, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x80800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0xe00, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010003", 0x7) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010001000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800a00010072616e67650000000900010073797a30000000000900020073797a3200000000140000000000000a00000a19f02a978d26576a08626fb9df1726a7e3d57a14f32bac30f68019697cffe01a46ac2f70d699aba95aa91ee390a43b49f4"], 0x68}}, 0x10) ioctl$FICLONE(r3, 0x40049409, r5) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002060108158abe434c50f97f001000faffff00000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x20040003) r8 = socket(0x2, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) 789.890118ms ago: executing program 3 (id=402): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f0000000080), 0x6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000007611880f2c289cea00180100002020702500000000005fc2b3b94db4d1811eab510c0dea81162020207b1af8ffe6ff0000bfa100000000000007010000f8ffffffb702faffffdf008500000006000000950000000000000000c72694fe18e88bfeac3ef2ef08cbf014afa67b9e355e562608410687e22abf3c2129060000001c0df6366ab9ebc3d76f4d2fccb3474daa600fb843da40d8080464000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x4, 0x1000}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe5d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x2b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r6 = socket(0x2c, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r4}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000009500000000ff0700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) fsetxattr$security_ima(r7, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x6, 0x0, 0xf, 0x5, 0x60, "f597920e5d653eea124147684cfc494c43c0b8c818c1ac31215dd8b49619bf8f38338f9a9bb3ae6ff3665c43d6480a2efbc6197984ebd8f4dbfb8bcf96ebc800aa09ecd32c8aee424ae2698e7845ca9a1639492cc9cbfdec824bcb5fb6fb1aee"}, 0x69, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000e08008000"], 0x9) 789.619054ms ago: executing program 3 (id=403): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000100)='vxfs\x00', 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000280)="3906615f7a07cbc5304c4a3e5678be9c51bdb68ec5cf33710fa2650def9773214863c5357556d295042ffeb0c8ae1baa466a0c4ad7c5c273bf687278c854f56158de1c67c233457d92e127811ad88462f7556c32dd7cd569e35b83096aad4ac1c1930f012172c08a6c6fde3e82bd852d6e82651a776b7ad79bb1d9100cf46c7e643ba897e292575980210388dd2ee026c564b00677ce8b4d881c0093b0dc29fc98ba8a1719bd43594503b827174116e15a9f0ca26efdcaaa2e3f4826fa94fa86fe17fabd0c880024d38909051c5d827bfa1ebfc857d3c60560d8daf1f4a039ba954417f567388e4ab187", 0xea}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000000000007000000441c490000000e5e0000000300000005000000060000000f00000002442487a3ac1e0101000000066401010000000004ac1414aa000000000000000000000009800000000000000007000000070b80ac1414bbac14143f00000100009411f82a96a9131aba403d53f5152a7f3f9404010001444c8193ac141412d9340a39e00000020000006fac141434fffffffc0000000000008000ac1414bb00000004ffffffff0000a6f90a01010200000008ac1414aa03800000e0000002000000e00000"], 0xcc}, 0x0) shutdown(0xffffffffffffffff, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = openat$pmem0(0xffffff9c, &(0x7f0000000100), 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[], 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x80000000}]}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x4000, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 679.75407ms ago: executing program 3 (id=404): mq_open(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x82, &(0x7f0000000500)={r3}, 0x8) r4 = socket(0x0, 0x3, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0xfd1, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r6) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000100)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000000000000000002000000000000006c8d5e8508acbe09153edf2e89b965dd79b0b918ba6fb0cb030303a21463a461072a9727b809a4761f23e7e65ddaf7b002000b1a408a309116aa6230aa8ff26ac438ed8a9048780646342d929f077fce6fdea2a86210069815b4cbe122c96597ae973c743af27aad6401a724c6e6b33ad20ceb2b55d66773577c1d91ef629b9c3b9fdc5917bd14c428f1f548c54215"], 0x2c}], 0x1}, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000001500), 0x588, 0x0) 420.18239ms ago: executing program 1 (id=405): pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000000400856785cb689ac6197946e100000401b5ff0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 419.932128ms ago: executing program 1 (id=406): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000300)=0x1d37, 0x2) r1 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r1) umount2(&(0x7f0000000280)='./file0\x00', 0x0) listen(r0, 0x1) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r5}, 0x10) unshare(0x26020480) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="009fef59d87b8b9e5d662ef2043ba37cd4e8cbc892ce6647af2c4050f2aefd480f34bc7b4b1ef1984e2696fbee0e4f75eb00fbba"], 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfbfffffa}]}}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, r10, 0x6, 0x3f00, 0x0, 0x800, {0x2, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x401, 0x40000) 359.601282ms ago: executing program 1 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) mq_open(&(0x7f00000000c0)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', 0x40, 0x1, &(0x7f0000000100)={0x1, 0x838c, 0xfffffffffffffff9, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8400ae8e, &(0x7f0000000140)) umount2(&(0x7f0000000000)='./file0\x00', 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x3a45c, &(0x7f00000002c0)={[{@redirect_dir_follow}, {@redirect_dir_nofollow}, {@verity_off}]}) 345.81881ms ago: executing program 1 (id=408): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, "73a30d4a0000a87c9db78c0e56e0437968035a7a", "ff7734156b726d230d88dc29f2689271b3ed008e"}) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)="d8000000180081054e81f782db4cb904021d08040603d70d0000000000002f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e0065cdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r4) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) (async) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000001f80)={0x29, 0x4, 0x0, {0x1, 0xffffffff, 0x1, 0x0, [0x0]}}, 0x29) (async) open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x464, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23f5a}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_MTU={0x8, 0x4, 0x4c6}, @IFLA_VFINFO_LIST={0x1a8, 0x16, 0x0, 0x1, [{0x1a4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xcee, 0xa1f5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x8d6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xa48c, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x7}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0xf2f, 0x6, 0x8100}}, {0x14, 0x1, {0xdfb, 0x6c, 0x4}}, {0x14, 0x1, {0x101, 0x794, 0x2, 0x88a8}}, {0x14, 0x1, {0xa422, 0x4a3, 0x2, 0x88a8}}, {0x14, 0x1, {0x49a1a20f, 0x434, 0x4, 0x88a8}}, {0x14, 0x1, {0xa3, 0x21, 0x10000, 0x8100}}, {0x14, 0x1, {0x6, 0x57d, 0x4, 0x88a8}}, {0x14, 0x1, {0x3c6, 0xdf3, 0x80000000, 0x88a8}}, {0x14, 0x1, {0x548, 0x6e, 0x6, 0x88a8}}, {0x14, 0x1, {0x1, 0x6a4, 0xfffffff6, 0x88a8}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x64c, 0x17, 0x8100}}, {0x14, 0x1, {0x3, 0xef0, 0x625b, 0x88a8}}, {0x14, 0x1, {0x1ff, 0x6d2, 0x400, 0x88a8}}, {0x14, 0x1, {0x1, 0xa4c, 0x7f4, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xb6a, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x81, 0x9}}]}]}, @IFLA_VFINFO_LIST={0x280, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x3, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7f, 0xc}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0xc, 0x9}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xf, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x86e957a8, 0x2}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x1, 0x3}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x0, 0x80000000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6f4, 0xf71, 0x400}}, @IFLA_VF_TRUST={0xc, 0x9, {0xdc, 0x1}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3814, 0x238, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x2, 0x1af, 0x6}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1dfe, 0x1d8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x600000, 0x10}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x9}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x200, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x4}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x3, 0x7}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x249, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xb, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0xc15, 0x9}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffff, @remote}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0xff, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x18, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x698}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x401, 0xff}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffff, 0xf4f, 0x9, 0x8100}}, {0x14, 0x1, {0x2b, 0x41, 0x1b, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x4}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5603, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fffffff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fffffff, 0x5}}]}]}]}, 0x464}}, 0x0) (rerun: 32) 344.913032ms ago: executing program 3 (id=409): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000050000080000008441d000a50007000000000000dc8c19230ce33474853edcc52f1ff01c17b605fb8f408d58b037e71297c615dffb25c4b1eb7550c4cc6522a0f6f9f4b413b9dd8ec7ec53052066f3a50cffdaffe65a9863415ee61382bb7844fb3fac07d9a21188737a38b0df4cf23c736c5245ae69dbe78d8a94e6c3532ba583e2bf8240ad5e80e1b4581dc9753d66f0cfa4029793001cbf6b4485c9350cdfe3166187551737"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0xf, 0x4}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f0000000100)={0x2, 0x0, @empty, 0x40}, 0x10) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x3, @rand_addr=0x64010100}, 0x10) r5 = socket(0xa, 0x1, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRESHEX=0x0, @ANYRES32], 0x230}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b100003", 0x2d}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x101, 0x4, 0x4, 0x8000, 0x5, 0x320000000000000, 0x1}, &(0x7f0000000040)={0x3, 0x0, 0x356, 0x5, 0xff, 0x8, 0x8, 0x2}, &(0x7f0000000080)={0x400, 0x5, 0xcc99, 0x1000, 0x5, 0x60, 0x1059, 0x8}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8, 0x5]}, 0x8}) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 0s ago: executing program 1 (id=410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) connect$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff06011500390100000000000007000000000000000002fffb02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x6) kernel console output (not intermixed with test programs): econfigured BSSID 50:50:50:50:50:50 [ 70.432944][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.439838][ T11] IPVS: stopping backup sync thread 5450 ... [ 70.445324][ T11] IPVS: stopping backup sync thread 5449 ... [ 70.449686][ T11] IPVS: stopping backup sync thread 5448 ... [ 70.449916][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.453528][ T11] IPVS: stopping backup sync thread 5447 ... [ 70.455122][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.457335][ T11] IPVS: stopping backup sync thread 5446 ... [ 70.459297][ T11] IPVS: stopping backup sync thread 5445 ... [ 70.465319][ T11] IPVS: stopping backup sync thread 5444 ... [ 70.467010][ T11] IPVS: stopping backup sync thread 5442 ... [ 70.470069][ T11] IPVS: stopping backup sync thread 5441 ... [ 70.471955][ T11] IPVS: stopping backup sync thread 5440 ... [ 70.473566][ T11] IPVS: stopping backup sync thread 5439 ... [ 70.475469][ T11] IPVS: stopping backup sync thread 5438 ... [ 70.477123][ T11] IPVS: stopping backup sync thread 5437 ... [ 70.487623][ T11] IPVS: stopping backup sync thread 5436 ... [ 70.498162][ T6093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.547204][ T6161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.555907][ T6161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.560535][ T6161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.565444][ T6161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.572882][ T6093] veth0_vlan: entered promiscuous mode [ 70.576429][ T6093] veth1_vlan: entered promiscuous mode [ 70.590367][ T6134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.598624][ T6134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.605877][ T6134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.612360][ T6134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.637131][ T65] Bluetooth: hci3: command tx timeout [ 70.639720][ T4780] Bluetooth: hci2: command tx timeout [ 70.662199][ T6093] veth0_macvtap: entered promiscuous mode [ 70.665522][ T6093] veth1_macvtap: entered promiscuous mode [ 70.675985][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.679241][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.681882][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.684520][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.689457][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.692855][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.695405][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.698421][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.701631][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.705901][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.709322][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.711717][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.714285][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.716942][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.719538][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.721979][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.724628][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.728107][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.744262][ T6093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.747752][ T6093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.750029][ T6093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.752344][ T6093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.784430][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.813670][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.813724][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.818272][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.820765][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.852711][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.854563][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.857829][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.859802][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.864854][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.866629][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.874776][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.881253][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.883439][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.901409][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.903950][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.011352][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.017280][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.039169][ T6161] veth0_vlan: entered promiscuous mode [ 71.045828][ T6161] veth1_vlan: entered promiscuous mode [ 71.058188][ T6134] veth0_vlan: entered promiscuous mode [ 71.067710][ T6134] veth1_vlan: entered promiscuous mode [ 71.104207][ T6161] veth0_macvtap: entered promiscuous mode [ 71.110073][ T6161] veth1_macvtap: entered promiscuous mode [ 71.112319][ T4780] Bluetooth: hci1: command tx timeout [ 71.116099][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.118712][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.121377][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.123989][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.126435][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.129025][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.131698][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.134445][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.137265][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.139848][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.143088][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.145443][ T6134] veth0_macvtap: entered promiscuous mode [ 71.152056][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.154787][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.157263][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.159930][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.162600][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.165279][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.167751][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.170340][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.173083][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.175688][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.178898][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.183120][ T6161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185332][ T6161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.187411][ T6161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.189483][ T6161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.198303][ T11] hsr_slave_0: left promiscuous mode [ 71.204348][ T11] hsr_slave_1: left promiscuous mode [ 71.206206][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.208120][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.210295][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.212393][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.218910][ T11] hsr_slave_0: left promiscuous mode [ 71.225875][ T11] hsr_slave_1: left promiscuous mode [ 71.228057][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.231807][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.234574][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.236574][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.243602][ T11] hsr_slave_0: left promiscuous mode [ 71.245352][ T11] hsr_slave_1: left promiscuous mode [ 71.247731][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.249604][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.252031][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.253880][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.307770][ T11] veth1_macvtap: left promiscuous mode [ 71.312331][ T11] veth0_macvtap: left promiscuous mode [ 71.313766][ T11] veth1_vlan: left promiscuous mode [ 71.315114][ T11] veth0_vlan: left promiscuous mode [ 71.317308][ T11] veth1_macvtap: left promiscuous mode [ 71.318711][ T11] veth0_macvtap: left promiscuous mode [ 71.320428][ T11] veth1_vlan: left promiscuous mode [ 71.321772][ T11] veth0_vlan: left promiscuous mode [ 71.354439][ T11] veth1_macvtap: left promiscuous mode [ 71.355936][ T11] veth0_macvtap: left promiscuous mode [ 71.357302][ T11] veth1_vlan: left promiscuous mode [ 71.358920][ T11] veth0_vlan: left promiscuous mode [ 71.387319][ T6214] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.511407][ T4780] Bluetooth: hci0: command tx timeout [ 71.978200][ T11] team0 (unregistering): Port device team_slave_1 removed [ 72.036146][ T11] team0 (unregistering): Port device team_slave_0 removed [ 72.694124][ T4780] Bluetooth: hci3: command tx timeout [ 73.029761][ T11] team0 (unregistering): Port device team_slave_1 removed [ 73.084866][ T11] team0 (unregistering): Port device team_slave_0 removed [ 73.169675][ T4780] Bluetooth: hci1: command tx timeout [ 73.565237][ T4780] Bluetooth: hci0: command tx timeout [ 73.951271][ T11] team0 (unregistering): Port device team_slave_1 removed [ 74.002846][ T11] team0 (unregistering): Port device team_slave_0 removed [ 74.393833][ T11] smc: removing net device lo with user defined pnetid SYZ2 [ 74.399900][ T6134] veth1_macvtap: entered promiscuous mode [ 74.428178][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.430977][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.433926][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.436633][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.454397][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.457183][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.460445][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.475594][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.478464][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.481162][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.483838][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.487871][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.490533][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.499301][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.509193][ T6134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.511780][ T6134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.513916][ T6134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.517561][ T6134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.522909][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.524948][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.550370][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.553174][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.562897][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.564947][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.589958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.592524][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.755588][ T4780] Bluetooth: hci3: command tx timeout [ 74.814651][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.818491][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.821224][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.824903][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.830224][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.832567][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.955337][ T6239] chnl_net:caif_netlink_parms(): no params data found [ 75.212104][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.213908][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.215974][ T6239] bridge_slave_0: entered allmulticast mode [ 75.217974][ T6239] bridge_slave_0: entered promiscuous mode [ 75.223519][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.225403][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.227397][ T6239] bridge_slave_1: entered allmulticast mode [ 75.229365][ T6239] bridge_slave_1: entered promiscuous mode [ 75.239515][ T4780] Bluetooth: hci1: command tx timeout [ 75.253972][ T6239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.257941][ T6239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.294522][ T6239] team0: Port device team_slave_0 added [ 75.299059][ T6239] team0: Port device team_slave_1 added [ 75.361512][ T6239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.363413][ T6239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.370161][ T6239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.374121][ T6239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.375935][ T6239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.382402][ T6239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.424729][ T6239] hsr_slave_0: entered promiscuous mode [ 75.427293][ T6239] hsr_slave_1: entered promiscuous mode [ 75.430301][ T6239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.432310][ T6239] Cannot create hsr debugfs directory [ 75.487699][ T981] cfg80211: failed to load regulatory.db [ 75.530653][ T6239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.677096][ T6256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.058344][ T6267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.150'. [ 76.077581][ T6239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.132621][ T6239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.188466][ T6270] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.281694][ T6239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.394874][ T11] bridge_slave_1: left allmulticast mode [ 76.396461][ T11] bridge_slave_1: left promiscuous mode [ 76.400933][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.404275][ T11] bridge_slave_0: left allmulticast mode [ 76.405620][ T11] bridge_slave_0: left promiscuous mode [ 76.407011][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.739213][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.748828][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.753570][ T11] bond0 (unregistering): Released all slaves [ 76.764341][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 76.766145][ T6284] overlayfs: failed to resolve './file1': -2 [ 76.768287][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.771218][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.774801][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.777745][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.803037][ T6282] vxcan2: entered allmulticast mode [ 76.829294][ T4780] Bluetooth: hci3: command tx timeout [ 76.896183][ T4780] Bluetooth: hci2: command tx timeout [ 76.900920][ T6239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.903893][ T6239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.906991][ T6239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.909914][ T6239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.939166][ T6239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.945753][ T6239] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.949840][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.951764][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.968012][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.970552][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.091896][ T11] hsr_slave_0: left promiscuous mode [ 77.094736][ T11] hsr_slave_1: left promiscuous mode [ 77.097116][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.099066][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.101333][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.103610][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.119494][ T11] veth1_macvtap: left promiscuous mode [ 77.121498][ T11] veth0_macvtap: left promiscuous mode [ 77.123623][ T11] veth1_vlan: left promiscuous mode [ 77.125652][ T11] veth0_vlan: left promiscuous mode [ 77.407671][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.418241][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.428951][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.440142][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.449246][ T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.451786][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.479045][ T5359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.484564][ T5359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.489648][ T5359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.500523][ T5346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.503844][ T5346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.506486][ T5346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.698555][ T11] team0 (unregistering): Port device team_slave_1 removed [ 77.757014][ T11] team0 (unregistering): Port device team_slave_0 removed [ 78.167858][ T6239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.253645][ T6239] veth0_vlan: entered promiscuous mode [ 78.258745][ T6300] chnl_net:caif_netlink_parms(): no params data found [ 78.268061][ T6239] veth1_vlan: entered promiscuous mode [ 78.306211][ T6298] chnl_net:caif_netlink_parms(): no params data found [ 78.310401][ T6239] veth0_macvtap: entered promiscuous mode [ 78.323936][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.327063][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.329568][ T6300] bridge_slave_0: entered allmulticast mode [ 78.332303][ T6300] bridge_slave_0: entered promiscuous mode [ 78.340921][ T6239] veth1_macvtap: entered promiscuous mode [ 78.344743][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.346620][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.348550][ T6300] bridge_slave_1: entered allmulticast mode [ 78.350557][ T6300] bridge_slave_1: entered promiscuous mode [ 78.352682][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 78.364981][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.368403][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.396150][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.399746][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.454510][ T6300] team0: Port device team_slave_0 added [ 78.465102][ T6300] team0: Port device team_slave_1 added [ 78.467476][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.470221][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.472812][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.475911][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.479374][ T6239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.482056][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.484845][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.487244][ T6298] bridge_slave_0: entered allmulticast mode [ 78.489507][ T6298] bridge_slave_0: entered promiscuous mode [ 78.493020][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.498486][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.500459][ T6298] bridge_slave_1: entered allmulticast mode [ 78.502635][ T6298] bridge_slave_1: entered promiscuous mode [ 78.525425][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.528181][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.530807][ T6239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.534531][ T6239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.537740][ T6239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.548113][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.549988][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.557876][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.561548][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.565661][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.573234][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.591653][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.596501][ T6239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.598791][ T6239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.601117][ T6239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.603573][ T6239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.612922][ T5389] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.624764][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.658898][ T6300] hsr_slave_0: entered promiscuous mode [ 78.660887][ T6300] hsr_slave_1: entered promiscuous mode [ 78.675194][ T6298] team0: Port device team_slave_0 added [ 78.680203][ T6298] team0: Port device team_slave_1 added [ 78.706163][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.708044][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.714933][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.719758][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.721614][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.729519][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.771680][ T5389] usb 5-1: Using ep0 maxpacket: 32 [ 78.775091][ T5389] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 78.777551][ T5389] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 78.780839][ T5389] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 78.784165][ T5389] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 78.788277][ T5389] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.790060][ T6298] hsr_slave_0: entered promiscuous mode [ 78.792327][ T5389] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 78.795031][ T5389] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 78.795150][ T6298] hsr_slave_1: entered promiscuous mode [ 78.797391][ T5389] usb 5-1: Product: syz [ 78.800086][ T5389] usb 5-1: Manufacturer: syz [ 78.800144][ T6298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.801500][ T5389] usb 5-1: SerialNumber: syz [ 78.804496][ T5389] usb 5-1: config 0 descriptor?? [ 78.805227][ T6298] Cannot create hsr debugfs directory [ 78.811122][ T5389] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.815216][ T5389] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 78.851405][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.876016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.878524][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.926533][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.941165][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.944048][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.970274][ T5346] Bluetooth: hci2: command tx timeout [ 79.001860][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.007952][ T5388] usb 5-1: USB disconnect, device number 2 [ 79.020384][ T5388] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 79.063941][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.064403][ T6331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.165'. [ 79.070460][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 79.074092][ T6331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.165'. [ 79.077512][ T6331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.165'. [ 79.213847][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.324069][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.412187][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.517055][ T5346] Bluetooth: hci1: command tx timeout [ 79.520284][ T5346] Bluetooth: hci3: command tx timeout [ 79.557815][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.684008][ T11] bridge_slave_1: left allmulticast mode [ 79.686077][ T11] bridge_slave_1: left promiscuous mode [ 79.687763][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.691251][ T11] bridge_slave_0: left allmulticast mode [ 79.692849][ T11] bridge_slave_0: left promiscuous mode [ 79.695036][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.705115][ T11] bridge_slave_1: left allmulticast mode [ 79.707023][ T11] bridge_slave_1: left promiscuous mode [ 79.708561][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.711542][ T11] bridge_slave_0: left allmulticast mode [ 79.713045][ T11] bridge_slave_0: left promiscuous mode [ 79.714659][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.818364][ T6372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.821531][ T6372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.105598][ T6375] 9pnet_fd: p9_fd_create_unix (6375): problem connecting socket: ./file1: -111 [ 80.180784][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.186790][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.192622][ T11] bond0 (unregistering): Released all slaves [ 80.276249][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.280312][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.284970][ T11] bond0 (unregistering): Released all slaves [ 80.389092][ T6300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.404054][ T6300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.430375][ T6300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.513358][ T6300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.592922][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.601288][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.610287][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.612301][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.616075][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.617487][ T6396] netlink: 'syz.2.170': attribute type 2 has an invalid length. [ 80.617925][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.633826][ T6396] : entered promiscuous mode [ 80.757103][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.822872][ T6300] veth0_vlan: entered promiscuous mode [ 80.830184][ T6300] veth1_vlan: entered promiscuous mode [ 80.844753][ T6300] veth0_macvtap: entered promiscuous mode [ 80.851918][ T6300] veth1_macvtap: entered promiscuous mode [ 80.859654][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.862450][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.865025][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.868537][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.871145][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.873883][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.877234][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.890730][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.893485][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.896049][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.899446][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.902055][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.904811][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.909179][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.919892][ T5389] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.924111][ T6298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.930204][ T6298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.934952][ T11] hsr_slave_0: left promiscuous mode [ 80.936777][ T11] hsr_slave_1: left promiscuous mode [ 80.939024][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.941236][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.944357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.946363][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.950304][ T11] hsr_slave_0: left promiscuous mode [ 80.952126][ T11] hsr_slave_1: left promiscuous mode [ 80.953964][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.955970][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.960696][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.962647][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.999165][ T11] veth1_macvtap: left promiscuous mode [ 81.000679][ T11] veth0_macvtap: left promiscuous mode [ 81.002151][ T11] veth1_vlan: left promiscuous mode [ 81.003548][ T11] veth0_vlan: left promiscuous mode [ 81.005580][ T11] veth1_macvtap: left promiscuous mode [ 81.007181][ T11] veth0_macvtap: left promiscuous mode [ 81.008651][ T11] veth1_vlan: left promiscuous mode [ 81.010038][ T11] veth0_vlan: left promiscuous mode [ 81.036746][ T5346] Bluetooth: hci2: command tx timeout [ 81.069848][ T5389] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.072977][ T5389] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.075890][ T5389] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.079332][ T5389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.084505][ T6404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.098140][ T5389] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.685225][ T5346] Bluetooth: hci3: command tx timeout [ 81.687885][ T5346] Bluetooth: hci1: command tx timeout [ 81.776876][ T11] team0 (unregistering): Port device team_slave_1 removed [ 81.837502][ T11] team0 (unregistering): Port device team_slave_0 removed [ 82.779999][ T11] team0 (unregistering): Port device team_slave_1 removed [ 82.852637][ T11] team0 (unregistering): Port device team_slave_0 removed [ 83.105208][ T5346] Bluetooth: hci2: command tx timeout [ 83.275874][ T6300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.278058][ T6300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.280201][ T6300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.282332][ T6300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.285172][ T6298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.289670][ T6298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.362867][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.370672][ T6424] input: syz1 as /devices/virtual/input/input6 [ 83.370731][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.375432][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.398100][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.400169][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.422185][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.437627][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.439920][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.450228][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.452117][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.560187][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.578443][ T6298] veth0_vlan: entered promiscuous mode [ 83.583286][ T6298] veth1_vlan: entered promiscuous mode [ 83.607138][ T6298] veth0_macvtap: entered promiscuous mode [ 83.610474][ T6298] veth1_macvtap: entered promiscuous mode [ 83.616987][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.619758][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.622674][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.625408][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.628664][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.634112][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.636872][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.639413][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.652344][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.655682][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.662883][ T6298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.665404][ T6298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.668386][ T6298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.670880][ T6298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.692123][ T73] usb 5-1: USB disconnect, device number 3 [ 83.732275][ T5346] Bluetooth: hci1: command tx timeout [ 83.743475][ T5346] Bluetooth: hci3: command 0x040f tx timeout [ 83.747431][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.750156][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.856583][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.858742][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.914482][ T6446] netlink: get zone limit has 4 unknown bytes [ 84.085510][ T39] audit: type=1326 audit(1730754949.974:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.0.176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0 [ 84.154749][ T6450] serio: Serial port ptm0 [ 84.451544][ T6466] UBIFS error (pid: 6466): cannot open "./file0", error -22 [ 84.452847][ T6466] netlink: 211388 bytes leftover after parsing attributes in process `syz.2.179'. [ 84.840697][ T6483] netlink: 'syz.0.184': attribute type 39 has an invalid length. [ 84.842933][ T6483] netlink: 'syz.0.184': attribute type 4 has an invalid length. [ 84.845156][ T6483] netlink: 152 bytes leftover after parsing attributes in process `syz.0.184'. [ 84.856512][ T6483] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 84.955843][ T5388] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 85.028397][ T6494] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 85.090512][ T6495] [U]  [ 85.171261][ T5388] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.175021][ T5388] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.178568][ T5388] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.181042][ T5388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.344864][ T6476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.349504][ T5388] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.812206][ T5346] Bluetooth: hci1: command tx timeout [ 85.813827][ T65] Bluetooth: hci3: command 0x040f tx timeout [ 87.610900][ T6545] fuse: Bad value for 'group_id' [ 87.612785][ T6545] fuse: Bad value for 'group_id' [ 87.738907][ T6554] netlink: 448 bytes leftover after parsing attributes in process `syz.2.200'. [ 87.874189][ T65] Bluetooth: hci3: command 0x040f tx timeout [ 88.158543][ T6523] fuse: Bad value for 'group_id' [ 88.160396][ T6523] fuse: Bad value for 'group_id' [ 88.919411][ T5388] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.015902][ T5411] usb 8-1: USB disconnect, device number 2 [ 89.058805][ T5388] usb 5-1: device descriptor read/64, error -71 [ 89.183302][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.276759][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.291282][ T5346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.295612][ T5346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.299337][ T5346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.302286][ T5346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.306233][ T5346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.308754][ T5388] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.316231][ T5346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.452734][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.457674][ T5388] usb 5-1: device descriptor read/64, error -71 [ 89.499797][ T6577] chnl_net:caif_netlink_parms(): no params data found [ 89.561431][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.579346][ T5388] usb usb5-port1: attempt power cycle [ 89.709536][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.712775][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.714926][ T6577] bridge_slave_0: entered allmulticast mode [ 89.718189][ T6577] bridge_slave_0: entered promiscuous mode [ 89.722532][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.724536][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.727123][ T6577] bridge_slave_1: entered allmulticast mode [ 89.729598][ T6577] bridge_slave_1: entered promiscuous mode [ 89.858607][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.892355][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.895042][ T1099] bridge_slave_1: left allmulticast mode [ 89.901879][ T1099] bridge_slave_1: left promiscuous mode [ 89.903634][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.912717][ T1099] bridge_slave_0: left allmulticast mode [ 89.914313][ T1099] bridge_slave_0: left promiscuous mode [ 89.918423][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.925792][ T5388] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.956480][ T5388] usb 5-1: device descriptor read/8, error -71 [ 90.214935][ T5388] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.235803][ T5388] usb 5-1: device descriptor read/8, error -71 [ 90.274271][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.287313][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.293330][ T1099] bond0 (unregistering): Released all slaves [ 90.355452][ T5388] usb usb5-port1: unable to enumerate USB device [ 90.372597][ T6577] team0: Port device team_slave_0 added [ 90.376002][ T6577] team0: Port device team_slave_1 added [ 90.404031][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.407741][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.417459][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.422819][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.425721][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.435181][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.444115][ T1099] : left promiscuous mode [ 90.596273][ T6577] hsr_slave_0: entered promiscuous mode [ 90.616275][ T6577] hsr_slave_1: entered promiscuous mode [ 90.635930][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.637993][ T6577] Cannot create hsr debugfs directory [ 91.391634][ T5346] Bluetooth: hci2: command tx timeout [ 91.504639][ T1099] hsr_slave_0: left promiscuous mode [ 91.515051][ T1099] hsr_slave_1: left promiscuous mode [ 91.525450][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.527597][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.533306][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.535402][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.558202][ T1099] veth1_macvtap: left promiscuous mode [ 91.559785][ T1099] veth0_macvtap: left promiscuous mode [ 91.561465][ T1099] veth1_vlan: left promiscuous mode [ 91.563051][ T1099] veth0_vlan: left promiscuous mode [ 91.650313][ T5388] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 91.816068][ T5388] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.819558][ T5388] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.823162][ T5388] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.825880][ T5388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.836559][ T6616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.842670][ T5388] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.730038][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 92.839647][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 93.455103][ T5346] Bluetooth: hci2: command tx timeout [ 93.787473][ T6577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.792377][ T6577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.801409][ T6577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.815044][ T6577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.852882][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.864731][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.868612][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.870502][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.875536][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.877417][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.989289][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.029979][ T6577] veth0_vlan: entered promiscuous mode [ 94.042928][ T6577] veth1_vlan: entered promiscuous mode [ 94.070387][ T6577] veth0_macvtap: entered promiscuous mode [ 94.080407][ T6577] veth1_macvtap: entered promiscuous mode [ 94.092162][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.097918][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.100519][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.104850][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.108396][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.118116][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.121081][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.124048][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.126875][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.130985][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.135315][ T6577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.137600][ T6577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.141787][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.146942][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.147071][ T6577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151069][ T6577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151125][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.157739][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.160680][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.162855][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.230044][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.261113][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.263410][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.294774][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.311154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.314904][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.355111][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 94.356946][ T6647] chnl_net:caif_netlink_parms(): no params data found [ 94.398555][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.453356][ T73] usb 8-1: USB disconnect, device number 3 [ 94.486139][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.488045][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.489971][ T6647] bridge_slave_0: entered allmulticast mode [ 94.492140][ T6647] bridge_slave_0: entered promiscuous mode [ 94.505268][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.507178][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.509103][ T6647] bridge_slave_1: entered allmulticast mode [ 94.511199][ T6647] bridge_slave_1: entered promiscuous mode [ 94.528958][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.555030][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.558625][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.585843][ T6647] team0: Port device team_slave_0 added [ 94.591117][ T6647] team0: Port device team_slave_1 added [ 94.633625][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.635741][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.652204][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.659761][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.666256][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.675838][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.717816][ T6647] hsr_slave_0: entered promiscuous mode [ 94.720698][ T6647] hsr_slave_1: entered promiscuous mode [ 94.723413][ T6647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.725435][ T6647] Cannot create hsr debugfs directory [ 94.784791][ T6684] serio: Serial port ptm0 [ 94.833514][ T45] bridge_slave_1: left allmulticast mode [ 94.835088][ T45] bridge_slave_1: left promiscuous mode [ 94.836620][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.839776][ T45] bridge_slave_0: left allmulticast mode [ 94.841835][ T45] bridge_slave_0: left promiscuous mode [ 94.843439][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.230553][ T5389] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 95.236285][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.242547][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.246557][ T45] bond0 (unregistering): Released all slaves [ 95.382073][ T5389] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.385818][ T5389] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.391271][ T5389] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.394368][ T5389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.402355][ T6703] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.411481][ T5389] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.661317][ T45] hsr_slave_0: left promiscuous mode [ 95.663852][ T45] hsr_slave_1: left promiscuous mode [ 95.678108][ T45] veth1_macvtap: left promiscuous mode [ 95.679659][ T45] veth0_macvtap: left promiscuous mode [ 95.681254][ T45] veth0_vlan: left promiscuous mode [ 96.248306][ T5346] Bluetooth: hci0: command tx timeout [ 96.826114][ T45] team0 (unregistering): Port device team_slave_1 removed [ 96.899436][ T45] team0 (unregistering): Port device team_slave_0 removed [ 97.582041][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 97.591584][ T6647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.595635][ T6647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.604687][ T6647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.618150][ T6647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.670697][ T6647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.677790][ T6647] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.681800][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.683679][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.690117][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.692070][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.768431][ T6647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.786372][ T6647] veth0_vlan: entered promiscuous mode [ 97.795923][ T6647] veth1_vlan: entered promiscuous mode [ 97.809164][ T6647] veth0_macvtap: entered promiscuous mode [ 97.812949][ T6647] veth1_macvtap: entered promiscuous mode [ 97.819740][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.822461][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.825816][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.828549][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.831272][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.833980][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.837383][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.841478][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.844170][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.847540][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.850212][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.852725][ T6647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.855562][ T6647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.859186][ T6647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.871393][ T6647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.873697][ T6647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.876347][ T6647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.878606][ T6647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.899117][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.938117][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.940211][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.953021][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.955159][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.962288][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.967041][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.969430][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.972440][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.977803][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.979998][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.004396][ T981] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 98.022268][ T73] usb 8-1: USB disconnect, device number 4 [ 98.055375][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 98.078059][ T6789] autofs: Bad value for 'uid' [ 98.079373][ T6789] autofs: Bad value for 'uid' [ 98.135423][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.137476][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.139378][ T6778] bridge_slave_0: entered allmulticast mode [ 98.141425][ T6778] bridge_slave_0: entered promiscuous mode [ 98.144292][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.146161][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.148055][ T6778] bridge_slave_1: entered allmulticast mode [ 98.150035][ T6778] bridge_slave_1: entered promiscuous mode [ 98.166547][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 98.169138][ T6789] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 98.169174][ T981] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 98.173311][ T981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.175900][ T981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.179053][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.183407][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.211937][ T981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 98.215077][ T981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 98.215505][ T6778] team0: Port device team_slave_0 added [ 98.217651][ T981] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.217674][ T981] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.217685][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.221701][ T981] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 98.225245][ T6778] team0: Port device team_slave_1 added [ 98.287466][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.289355][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.296380][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.301248][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.303112][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.310744][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.323815][ T65] Bluetooth: hci0: command tx timeout [ 98.362973][ T6778] hsr_slave_0: entered promiscuous mode [ 98.365292][ T6778] hsr_slave_1: entered promiscuous mode [ 98.367253][ T6778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.369318][ T6778] Cannot create hsr debugfs directory [ 98.599301][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.756382][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.845151][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.920820][ T45] bridge_slave_1: left allmulticast mode [ 98.922364][ T45] bridge_slave_1: left promiscuous mode [ 98.924373][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.929195][ T45] bridge_slave_0: left allmulticast mode [ 98.930725][ T45] bridge_slave_0: left promiscuous mode [ 98.932383][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.440504][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.447254][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.451406][ T45] bond0 (unregistering): Released all slaves [ 99.874137][ T39] audit: type=1326 audit(1730754965.813:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.3.246" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 99.909543][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.914297][ T6818] bond0: (slave rose0): Enslaving as an active interface with an up link [ 99.968976][ T6824] overlayfs: missing 'lowerdir' [ 100.007463][ T45] hsr_slave_0: left promiscuous mode [ 100.009585][ T45] hsr_slave_1: left promiscuous mode [ 100.011366][ T65] Bluetooth: hci2: command tx timeout [ 100.013819][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.018054][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.021602][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.023550][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.067225][ T45] veth1_macvtap: left promiscuous mode [ 100.068757][ T45] veth0_macvtap: left promiscuous mode [ 100.070779][ T45] veth1_vlan: left promiscuous mode [ 100.072179][ T45] veth0_vlan: left promiscuous mode [ 100.399915][ T65] Bluetooth: hci0: command tx timeout [ 100.652224][ T45] team0 (unregistering): Port device team_slave_1 removed [ 100.732987][ T45] team0 (unregistering): Port device team_slave_0 removed [ 100.776916][ T981] usb 6-1: USB disconnect, device number 10 [ 100.870546][ T6831] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.312524][ T6778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.316188][ T6778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.320904][ T6778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.327690][ T6778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.379763][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.387199][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.391617][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.393436][ T6707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.399598][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.401375][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.496439][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.521718][ T6778] veth0_vlan: entered promiscuous mode [ 101.527556][ T6778] veth1_vlan: entered promiscuous mode [ 101.539745][ T6778] veth0_macvtap: entered promiscuous mode [ 101.542624][ T6778] veth1_macvtap: entered promiscuous mode [ 101.548710][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.554396][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.557675][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.562254][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.566043][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.569609][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.573205][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.584258][ T5346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.587305][ T5346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.590949][ T5346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.592779][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.595682][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.596858][ T5346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.601989][ T5346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.604036][ T5346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.627599][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.630447][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.633028][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.636026][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.642815][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.648575][ T6778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.650952][ T6778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.653150][ T6778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.655358][ T6778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.708858][ T6707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.710996][ T6707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.722140][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.724821][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.759439][ T6880] capability: warning: `syz.0.255' uses 32-bit capabilities (legacy support in use) [ 101.776267][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 101.779941][ T6882] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 101.781969][ T6882] netlink: 723 bytes leftover after parsing attributes in process `syz.2.240'. [ 101.846970][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.876759][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.879015][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.880770][ T6872] bridge_slave_0: entered allmulticast mode [ 101.882867][ T6872] bridge_slave_0: entered promiscuous mode [ 101.885528][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.887892][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.890067][ T6872] bridge_slave_1: entered allmulticast mode [ 101.892236][ T6872] bridge_slave_1: entered promiscuous mode [ 101.927110][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.933350][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.937036][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.970264][ T6872] team0: Port device team_slave_0 added [ 101.988386][ T6872] team0: Port device team_slave_1 added [ 102.010054][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.011816][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.018355][ T5389] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 102.021644][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.049169][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.057769][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.059520][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.065901][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.077265][ T5346] Bluetooth: hci2: command tx timeout [ 102.098439][ T6872] hsr_slave_0: entered promiscuous mode [ 102.100366][ T6872] hsr_slave_1: entered promiscuous mode [ 102.102153][ T6872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.104280][ T6872] Cannot create hsr debugfs directory [ 102.127203][ T1998] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.137603][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.167250][ T5389] usb 6-1: Using ep0 maxpacket: 8 [ 102.169948][ T5389] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 102.172105][ T5389] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.174482][ T5389] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.177466][ T5389] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 102.182161][ T5389] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 102.184588][ T5389] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.187947][ T5389] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.190160][ T5389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.194156][ T5389] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 102.220731][ T45] bridge_slave_1: left allmulticast mode [ 102.222252][ T45] bridge_slave_1: left promiscuous mode [ 102.223746][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.226585][ T45] bridge_slave_0: left allmulticast mode [ 102.228183][ T45] bridge_slave_0: left promiscuous mode [ 102.229800][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.276943][ T1998] usb 5-1: Using ep0 maxpacket: 8 [ 102.279612][ T1998] usb 5-1: config 0 has no interfaces? [ 102.283145][ T1998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.285905][ T1998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.288006][ T1998] usb 5-1: Product: syz [ 102.289458][ T1998] usb 5-1: Manufacturer: syz [ 102.290680][ T1998] usb 5-1: SerialNumber: syz [ 102.292951][ T1998] usb 5-1: config 0 descriptor?? [ 102.454980][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.460954][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.466058][ T45] bond0 (unregistering): Released all slaves [ 102.476596][ T5346] Bluetooth: hci0: command tx timeout [ 102.850241][ T981] usb 5-1: USB disconnect, device number 8 [ 102.866300][ T45] hsr_slave_0: left promiscuous mode [ 102.868683][ T45] hsr_slave_1: left promiscuous mode [ 102.870989][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.873300][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.875747][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.878496][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.903976][ T45] veth1_macvtap: left promiscuous mode [ 102.905920][ T45] veth0_macvtap: left promiscuous mode [ 102.907867][ T45] veth1_vlan: left promiscuous mode [ 102.909716][ T45] veth0_vlan: left promiscuous mode [ 103.580792][ T45] team0 (unregistering): Port device team_slave_1 removed [ 103.647208][ T45] team0 (unregistering): Port device team_slave_0 removed [ 103.677011][ T5346] Bluetooth: hci3: command tx timeout [ 104.164219][ T5346] Bluetooth: hci2: command tx timeout [ 104.195169][ T6872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.199756][ T6872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.207227][ T6872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.211048][ T6872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.259609][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.280614][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.285429][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.288157][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.293941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.295981][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.393258][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.411370][ T6872] veth0_vlan: entered promiscuous mode [ 104.416460][ T6872] veth1_vlan: entered promiscuous mode [ 104.429085][ T6872] veth0_macvtap: entered promiscuous mode [ 104.432466][ T6872] veth1_macvtap: entered promiscuous mode [ 104.445412][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.448633][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.451890][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.456757][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.460138][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.464147][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.468754][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.476086][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.478927][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.481515][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.486329][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.489071][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.491813][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.496265][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.501773][ T6872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.504352][ T6872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.506678][ T6872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.509426][ T6872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.538784][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.540754][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.556031][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.557999][ T6945] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 104.558244][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.562113][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'. [ 104.812206][ T981] usb 6-1: USB disconnect, device number 11 [ 105.282898][ T981] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 105.434092][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 105.438783][ T981] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.440973][ T981] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.443345][ T981] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.445566][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.448099][ T981] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.450615][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.454366][ T981] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.457233][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.462962][ T981] usb 6-1: config 0 descriptor?? [ 105.544672][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 105.669698][ T981] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.678671][ T981] usb 6-1: USB disconnect, device number 12 [ 105.683974][ T981] usblp0: removed [ 105.715916][ T5412] hid (null): report_id 0 is invalid [ 105.719161][ T5412] hid-generic 0005:F4B2:0003.0003: unknown main item tag 0x5 [ 105.723934][ T5412] hid-generic 0005:F4B2:0003.0003: unknown main item tag 0xd [ 105.725942][ T5412] hid-generic 0005:F4B2:0003.0003: report_id 0 is invalid [ 105.727809][ T5412] hid-generic 0005:F4B2:0003.0003: item 0 0 1 8 parsing failed [ 105.729948][ T5412] hid-generic 0005:F4B2:0003.0003: probe with driver hid-generic failed with error -22 [ 105.752655][ T5346] Bluetooth: hci3: command tx timeout [ 106.121838][ T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.231627][ T5346] Bluetooth: hci2: command tx timeout [ 106.281433][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 106.284575][ T30] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.286777][ T30] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.289205][ T30] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.291689][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.294270][ T30] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.296789][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.300020][ T30] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.302566][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.307039][ T30] usb 6-1: config 0 descriptor?? [ 107.919027][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 107.954294][ T30] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.964841][ T30] usb 6-1: USB disconnect, device number 13 [ 107.970526][ T30] usblp0: removed [ 108.069676][ T5346] Bluetooth: hci3: command tx timeout [ 108.157579][ T7037] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.164119][ T7037] program syz.3.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.209478][ T1069] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 108.211612][ T1069] ata1.00: irq_stat 0x40000000 [ 108.213210][ T1069] ata1.00: failed command: ZAC MANAGEMENT OUT [ 108.215084][ T1069] ata1.00: cmd 9f/02:00:00:00:00/01:00:00:00:00/40 tag 13 [ 108.215084][ T1069] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 108.220638][ T1069] ata1.00: status: { DRDY ERR } [ 108.222433][ T1069] ata1.00: error: { ABRT } [ 108.223727][ T1069] ata1.00: device reported invalid CHS sector 0 [ 108.449197][ T5407] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 108.545530][ T7048] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.547654][ T7048] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.616672][ T5407] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.619851][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.622681][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.625211][ T5407] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.628593][ T5407] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.636010][ T5407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.639232][ T5407] usb 8-1: config 0 descriptor?? [ 108.645823][ C3] ata1: illegal qc_active transition (00000000->00080000) [ 108.883047][ T6706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.957563][ T6706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.971756][ T1069] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 108.978544][ T1069] ata1.00: configured for UDMA/100 [ 108.994037][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.996725][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.002118][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.006333][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.010471][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.013371][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.037184][ T6706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.051898][ T5407] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 109.070084][ T5407] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 109.095389][ T6706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.155640][ T7050] chnl_net:caif_netlink_parms(): no params data found [ 109.210764][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.212710][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.214600][ T7050] bridge_slave_0: entered allmulticast mode [ 109.216620][ T7050] bridge_slave_0: entered promiscuous mode [ 109.220144][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.222099][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.223865][ T7050] bridge_slave_1: entered allmulticast mode [ 109.225784][ T7050] bridge_slave_1: entered promiscuous mode [ 109.253942][ T6706] bridge_slave_1: left allmulticast mode [ 109.255476][ T6706] bridge_slave_1: left promiscuous mode [ 109.256999][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.261493][ T6706] bridge_slave_0: left allmulticast mode [ 109.263013][ T6706] bridge_slave_0: left promiscuous mode [ 109.265665][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.278216][ T56] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 109.362529][ T981] usb 8-1: USB disconnect, device number 5 [ 109.428791][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 109.432801][ T56] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.435675][ T56] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.439078][ T56] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.442134][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.445439][ T56] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.450157][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.454442][ T56] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.457516][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.461836][ T56] usb 6-1: config 0 descriptor?? [ 109.519429][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.523293][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.526663][ T6706] bond0 (unregistering): Released all slaves [ 109.548911][ T7050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.552754][ T7050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.581792][ T7050] team0: Port device team_slave_0 added [ 109.586801][ T7050] team0: Port device team_slave_1 added [ 109.619366][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.621092][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.628623][ T7050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.632961][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.634927][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.642228][ T7050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.678453][ T56] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.687012][ T56] usb 6-1: USB disconnect, device number 14 [ 109.690156][ T56] usblp0: removed [ 109.710720][ T7050] hsr_slave_0: entered promiscuous mode [ 109.712809][ T7050] hsr_slave_1: entered promiscuous mode [ 109.890574][ T6706] hsr_slave_0: left promiscuous mode [ 109.896747][ T6706] hsr_slave_1: left promiscuous mode [ 109.900167][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.902643][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.905351][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.908558][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.925124][ T6706] veth1_macvtap: left promiscuous mode [ 109.927022][ T6706] veth0_macvtap: left promiscuous mode [ 109.930951][ T6706] veth1_vlan: left promiscuous mode [ 109.932747][ T6706] veth0_vlan: left promiscuous mode [ 110.141766][ T5412] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 110.287279][ T5412] usb 6-1: Using ep0 maxpacket: 32 [ 110.300896][ T5412] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 110.303744][ T5412] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 110.306423][ T5412] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 110.313665][ T5412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.321987][ T5412] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.325342][ T5412] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.328833][ T5412] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 110.331246][ T5412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.338345][ T5412] usb 6-1: config 0 descriptor?? [ 110.614444][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 110.693880][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 111.039368][ T65] Bluetooth: hci0: command tx timeout [ 111.226103][ T7096] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.234387][ T7096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.530235][ T7050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.535359][ T7050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.540630][ T7050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.543666][ T7050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.577182][ T7050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.585912][ T7050] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.594811][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.597530][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.624462][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.627009][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.645442][ T5346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.650086][ T5346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.653513][ T5346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.657310][ T5346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.661023][ T5346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.663423][ T5346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.717229][ T7131] serio: Serial port ptm0 [ 111.760311][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.772236][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 111.781180][ T7050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.835340][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.860171][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.862944][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.874225][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.878145][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.881189][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.884271][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.887959][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.889868][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.891781][ T7119] bridge_slave_0: entered allmulticast mode [ 111.893890][ T7119] bridge_slave_0: entered promiscuous mode [ 111.897411][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.899849][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.902251][ T7119] bridge_slave_1: entered allmulticast mode [ 111.904735][ T7119] bridge_slave_1: entered promiscuous mode [ 111.908022][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.911076][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.914334][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.3.303'. [ 111.924746][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.950756][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.955116][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.984425][ T7119] team0: Port device team_slave_0 added [ 111.989293][ T7119] team0: Port device team_slave_1 added [ 112.004965][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.039499][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.041920][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.043336][ T5412] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.050626][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.056529][ T5412] usb 6-1: USB disconnect, device number 15 [ 112.060123][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.061231][ T5412] usblp0: removed [ 112.062608][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.073389][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.090565][ T7050] veth0_vlan: entered promiscuous mode [ 112.135751][ T7050] veth1_vlan: entered promiscuous mode [ 112.142572][ T7119] hsr_slave_0: entered promiscuous mode [ 112.146587][ T7119] hsr_slave_1: entered promiscuous mode [ 112.149758][ T7119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.152288][ T7119] Cannot create hsr debugfs directory [ 112.243032][ T7050] veth0_macvtap: entered promiscuous mode [ 112.314843][ T11] bridge_slave_1: left allmulticast mode [ 112.319424][ T11] bridge_slave_1: left promiscuous mode [ 112.321074][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.325028][ T11] bridge_slave_0: left allmulticast mode [ 112.326819][ T11] bridge_slave_0: left promiscuous mode [ 112.328374][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.589831][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.595304][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.601710][ T11] bond0 (unregistering): Released all slaves [ 112.613818][ T7050] veth1_macvtap: entered promiscuous mode [ 112.663137][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.669348][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.672051][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.675781][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.679100][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.682567][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.687087][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.693172][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.695979][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.698264][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.700749][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.703039][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.707749][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.711803][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.752483][ T7050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.755029][ T7050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.758165][ T7050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.761488][ T7050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.855921][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.861185][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.874250][ T6707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.876684][ T6707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.985639][ T11] hsr_slave_0: left promiscuous mode [ 112.987547][ T11] hsr_slave_1: left promiscuous mode [ 112.990103][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.992161][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.994561][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.996626][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.014413][ T11] veth1_macvtap: left promiscuous mode [ 113.016792][ T11] veth0_macvtap: left promiscuous mode [ 113.018248][ T11] veth1_vlan: left promiscuous mode [ 113.019657][ T11] veth0_vlan: left promiscuous mode [ 113.105223][ T65] Bluetooth: hci0: command tx timeout [ 113.217965][ T831] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 113.364721][ T831] usb 8-1: Using ep0 maxpacket: 32 [ 113.371912][ T831] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.374407][ T831] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.377241][ T831] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.379602][ T831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.382107][ T831] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.384553][ T831] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.387830][ T831] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.390129][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.393120][ T831] usb 8-1: config 0 descriptor?? [ 113.426944][ T65] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.436852][ T65] Bluetooth: hci3: Injecting HCI hardware error event [ 113.443711][ T65] Bluetooth: hci3: hardware error 0x00 [ 113.599083][ T831] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.602916][ T831] usb 8-1: USB disconnect, device number 6 [ 113.605801][ T831] usblp0: removed [ 113.710626][ T11] team0 (unregistering): Port device team_slave_1 removed [ 113.745365][ T5346] Bluetooth: hci2: command tx timeout [ 113.798238][ T11] team0 (unregistering): Port device team_slave_0 removed [ 114.054201][ T831] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 114.224100][ T831] usb 8-1: Using ep0 maxpacket: 32 [ 114.226835][ T831] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 114.229117][ T831] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 114.231513][ T831] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 114.233907][ T831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.236510][ T831] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.239267][ T831] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.243318][ T831] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 114.246090][ T831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.255340][ T831] usb 8-1: config 0 descriptor?? [ 114.475703][ T7119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.480475][ T7119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.484865][ T7119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.488466][ T7119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.531612][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.538843][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.543443][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.545578][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.552657][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.554910][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.597425][ T7119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.679634][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.708920][ T7119] veth0_vlan: entered promiscuous mode [ 114.714286][ T7119] veth1_vlan: entered promiscuous mode [ 114.727655][ T7119] veth0_macvtap: entered promiscuous mode [ 114.731407][ T7119] veth1_macvtap: entered promiscuous mode [ 114.738060][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.740916][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.743526][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.746739][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.749404][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.752443][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.756501][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.764566][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.768084][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.771557][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.775345][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.778376][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.781334][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.785827][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.790202][ T7119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.792535][ T7119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.794984][ T7119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.797772][ T7119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.829139][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.831277][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.841582][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.844002][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.183535][ T5346] Bluetooth: hci0: command tx timeout [ 115.291154][ T7236] __nla_validate_parse: 24 callbacks suppressed [ 115.291165][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 115.513266][ T65] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 115.521774][ T7240] netlink: 'syz.1.319': attribute type 4 has an invalid length. [ 115.526317][ T7240] EXT4-fs (sda1): shut down requested (0) [ 115.823117][ T65] Bluetooth: hci2: command tx timeout [ 115.975747][ T831] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.982115][ T831] usb 8-1: USB disconnect, device number 7 [ 115.988186][ T831] usblp0: removed [ 116.130589][ T7253] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.132512][ T7253] overlayfs: failed to set xattr on upper [ 116.134227][ T7253] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.136191][ T7253] overlayfs: ...falling back to index=off. [ 116.137901][ T7253] overlayfs: ...falling back to uuid=null. [ 116.139629][ T7253] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 116.552668][ T5412] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.657977][ T7269] IPv6: Can't replace route, no match found [ 116.703874][ T5412] usb 5-1: Using ep0 maxpacket: 16 [ 116.708114][ T5412] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.710657][ T5412] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 116.714986][ T5412] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.717459][ T5412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.719623][ T5412] usb 5-1: Product: Ⰱ [ 116.720749][ T5412] usb 5-1: Manufacturer: ⼪擒㕳嶻ɦ⢒圴脤Ც㕾ꈖៗ嵠嶜佖힝羔욧ጦể蛼ଓ鳂粁岅鸂膁꣛辜焰躿 [ 116.731732][ T5412] usb 5-1: SerialNumber: ఊ [ 116.811069][ T7271] netlink: 352 bytes leftover after parsing attributes in process `syz.1.329'. [ 116.946193][ T5412] cdc_ncm 5-1:1.0: bind() failure [ 116.949762][ T5412] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 116.951688][ T5412] cdc_ncm 5-1:1.1: bind() failure [ 116.955816][ T5412] usb 5-1: USB disconnect, device number 9 [ 117.051893][ T7282] delete_channel: no stack [ 117.082178][ T1998] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 117.232191][ T1998] usb 6-1: Using ep0 maxpacket: 32 [ 117.235561][ T1998] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.237789][ T1998] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.242853][ T1998] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.245557][ T1998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.251303][ T1998] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.262289][ T65] Bluetooth: hci0: command tx timeout [ 117.264862][ T1998] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.268303][ T1998] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.270656][ T1998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.283360][ T1998] usb 6-1: config 0 descriptor?? [ 117.502825][ T1998] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.525378][ T1998] usb 6-1: USB disconnect, device number 16 [ 117.532768][ T1998] usblp0: removed [ 117.575548][ T7284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.332'. [ 117.686561][ T7284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.693990][ T7284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.697855][ T7284] bond0 (unregistering): Released all slaves [ 117.737722][ T7278] delete_channel: no stack [ 117.901769][ T65] Bluetooth: hci2: command tx timeout [ 117.944543][ T7292] syz.2.335 uses obsolete (PF_INET,SOCK_PACKET) [ 117.946930][ T7292] syzkaller1: entered promiscuous mode [ 117.948515][ T7292] syzkaller1: entered allmulticast mode [ 118.011678][ T1998] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 118.161634][ T1998] usb 6-1: Using ep0 maxpacket: 32 [ 118.164205][ T1998] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.166350][ T1998] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.168612][ T1998] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.170935][ T1998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.174212][ T1998] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.176726][ T1998] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.180195][ T1998] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.182622][ T1998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.185586][ T1998] usb 6-1: config 0 descriptor?? [ 118.205857][ T65] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 118.206681][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.227104][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.281212][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.563919][ T39] audit: type=1326 audit(1730754984.522:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.2.338" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 118.860186][ T7320] netlink: 'syz.0.341': attribute type 25 has an invalid length. [ 118.916557][ T7317] netlink: 'syz.3.340': attribute type 7 has an invalid length. [ 118.918741][ T7317] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.340'. [ 118.925312][ T7317] netlink: 'syz.3.340': attribute type 3 has an invalid length. [ 118.928068][ T7317] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.340'. [ 118.960855][ T7322] kernel profiling enabled (shift: 0) [ 119.864125][ T7332] netlink: 'syz.3.344': attribute type 3 has an invalid length. [ 119.874560][ T7332] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 119.900915][ T1998] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.906850][ T1998] usb 6-1: USB disconnect, device number 17 [ 119.921113][ T1998] usblp0: removed [ 119.980689][ T65] Bluetooth: hci2: command tx timeout [ 119.985768][ T7338] netlink: 172 bytes leftover after parsing attributes in process `syz.1.345'. [ 119.988251][ T7338] netlink: 172 bytes leftover after parsing attributes in process `syz.1.345'. [ 120.210947][ T7342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.346'. [ 120.213938][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 120.391220][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 120.396278][ T7329] syz.2.342 (7329) used greatest stack depth: 20544 bytes left [ 120.464248][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 120.676232][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 120.912969][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 121.500540][ T1998] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 121.651091][ T1998] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 121.653759][ T1998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.660475][ T1998] usb 5-1: config 0 descriptor?? [ 121.868372][ T7383] netlink: 'syz.0.357': attribute type 10 has an invalid length. [ 121.871240][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.357'. [ 121.875913][ T7383] batman_adv: batadv0: Adding interface: vlan1 [ 121.878292][ T7383] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.886439][ T7383] batman_adv: batadv0: Interface activated: vlan1 [ 122.100124][ T1998] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 122.102044][ T1998] hackrf 5-1:0.0: Could not detect board [ 122.106307][ T1998] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 122.109133][ T1998] usb 5-1: USB disconnect, device number 10 [ 122.445302][ T1998] libceph: connect (1)[c::]:6789 error -101 [ 122.447301][ T1998] libceph: mon0 (1)[c::]:6789 connect error [ 122.530938][ T7399] ceph: No mds server is up or the cluster is laggy [ 122.788362][ T7412] Bluetooth: MGMT ver 1.23 [ 123.497398][ T7415] geneve0: entered promiscuous mode [ 123.499001][ T7415] macvlan2: entered promiscuous mode [ 123.500720][ T7415] macvlan2: entered allmulticast mode [ 123.502159][ T7415] geneve0: entered allmulticast mode [ 123.905173][ T39] audit: type=1326 audit(1730754989.865:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.2.367" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0 [ 124.749826][ T7442] netlink: 'syz.2.371': attribute type 29 has an invalid length. [ 124.858696][ T65] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 124.859235][ T5346] Bluetooth: hci0: command 0x0401 tx timeout [ 125.121448][ T831] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 125.125694][ T831] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.143561][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 125.438501][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 125.588374][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 125.591046][ T56] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 125.593269][ T56] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 125.595600][ T56] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.597811][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.600793][ T56] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.603514][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.607231][ T56] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.610009][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.616584][ T56] usb 8-1: config 0 descriptor?? [ 125.808737][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 125.821972][ T56] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.825238][ T56] usb 8-1: USB disconnect, device number 8 [ 125.827551][ T56] usblp0: removed [ 125.871458][ T7465] block nbd1: shutting down sockets [ 125.939991][ T7476] netlink: 116 bytes leftover after parsing attributes in process `syz.2.379'. [ 126.048106][ T7480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.381'. [ 126.268482][ T5389] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 126.418126][ T5389] usb 8-1: Using ep0 maxpacket: 32 [ 126.422377][ T5389] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 126.424538][ T5389] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 126.426925][ T5389] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 126.429294][ T5389] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.431733][ T5389] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.434138][ T5389] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.437562][ T5389] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 126.439973][ T5389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.443445][ T5389] usb 8-1: config 0 descriptor?? [ 126.627492][ T7487] loop7: detected capacity change from 0 to 16384 [ 127.099173][ T831] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 127.253391][ T831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.256005][ T831] usb 6-1: config 0 has no interfaces? [ 127.257401][ T831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.259897][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.263753][ T831] usb 6-1: config 0 descriptor?? [ 127.608997][ T7498] veth0_vlan: left promiscuous mode [ 127.611251][ T7498] veth0_vlan: entered promiscuous mode [ 128.137626][ T7514] nbd2: detected capacity change from 0 to 12 [ 128.140330][ T831] usb 6-1: string descriptor 0 read error: -71 [ 128.143944][ T6244] block nbd2: Send control failed (result -89) [ 128.145762][ T6244] block nbd2: Request send failed, requeueing [ 128.149153][ T831] usb 6-1: USB disconnect, device number 18 [ 128.150978][ T7514] block nbd2: NBD_DISCONNECT [ 128.152209][ T5346] block nbd2: Receive control failed (result -32) [ 128.155133][ T7514] block nbd2: Send disconnect failed -89 [ 128.159390][ T31] block nbd2: Dead connection, failed to find a fallback [ 128.161555][ T31] block nbd2: shutting down sockets [ 128.163218][ T31] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.165757][ T31] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.178709][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.181273][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.184312][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.187660][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.190577][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.194729][ T5389] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 128.196093][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.200404][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.204899][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.207384][ T5389] usb 8-1: USB disconnect, device number 9 [ 128.209376][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.212177][ T5389] usblp0: removed [ 128.212612][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.216095][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.224833][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.228034][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.229872][ T7517] x_tables: duplicate underflow at hook 2 [ 128.231141][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.235610][ T6244] ldm_validate_partition_table(): Disk read failed. [ 128.239406][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.242562][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.245571][ T6244] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.252609][ T7517] loop2: detected capacity change from 0 to 7 [ 128.256488][ T6244] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.260677][ T6244] Dev nbd2: unable to read RDB block 0 [ 128.262865][ T6244] nbd2: unable to read partition table [ 128.264914][ T6244] nbd2: partition table beyond EOD, truncated [ 128.269254][ T7514] ldm_validate_partition_table(): Disk read failed. [ 128.271253][ T7514] Dev nbd2: unable to read RDB block 0 [ 128.272968][ T7514] nbd2: unable to read partition table [ 128.275060][ T7514] nbd2: partition table beyond EOD, truncated [ 128.280507][ T6244] ldm_validate_partition_table(): Disk read failed. [ 128.284063][ T7517] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 128.284095][ T7517] loop2: partition table partially beyond EOD, truncated [ 128.284712][ T7517] loop2: p1 size 6333 extends beyond EOD, truncated [ 128.286786][ T6244] Dev nbd2: unable to read RDB block 0 [ 128.286989][ T6244] nbd2: unable to read partition table [ 128.287106][ T6244] nbd2: partition table beyond EOD, truncated [ 128.530679][ T7531] veth1_macvtap: left promiscuous mode [ 128.532210][ T7531] macsec0: entered promiscuous mode [ 128.533581][ T7531] macsec0: entered allmulticast mode [ 128.540179][ T7531] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 128.540179][ T7531] program syz.3.392 not setting count and/or reply_len properly [ 129.747080][ T39] audit: type=1326 audit(1730754995.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.3.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7fc00000 [ 129.987086][ T5389] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 130.136980][ T5389] usb 6-1: Using ep0 maxpacket: 8 [ 130.140772][ T5389] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 130.142745][ T5389] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.145107][ T5389] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.156980][ T5389] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.159425][ T5389] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.162611][ T5389] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.164860][ T5389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.383002][ T5389] usb 6-1: GET_CAPABILITIES returned 0 [ 130.384483][ T5389] usbtmc 6-1:16.0: can't read capabilities [ 130.589055][ T73] usb 6-1: USB disconnect, device number 19 [ 130.717555][ T7558] block nbd3: shutting down sockets [ 130.744260][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 131.134508][ T7571] Process accounting resumed [ 131.140945][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.144476][ T7571] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.147955][ T7571] Error parsing options; rc = [-22] [ 131.466720][ T5412] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 131.542193][ T72] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 131.658189][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.659964][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.670855][ T72] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.801883][ T72] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.998002][ T5412] usb 8-1: device descriptor read/all, error -71 [ 132.046222][ T72] bridge_slave_1: left allmulticast mode [ 132.048802][ T72] bridge_slave_1: left promiscuous mode [ 132.051148][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.054961][ T72] bridge_slave_0: left allmulticast mode [ 132.057299][ T72] bridge_slave_0: left promiscuous mode [ 132.058947][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.292934][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.297062][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.300807][ T72] bond0 (unregistering): Released all slaves [ 132.557903][ T72] hsr_slave_0: left promiscuous mode [ 132.560115][ T72] hsr_slave_1: left promiscuous mode [ 132.562120][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.564351][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.567182][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.569404][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.594836][ T72] veth1_macvtap: left promiscuous mode [ 132.596905][ T72] veth0_macvtap: left promiscuous mode [ 132.598882][ T72] veth1_vlan: left promiscuous mode [ 132.600745][ T72] veth0_vlan: left promiscuous mode [ 133.336053][ T72] team0 (unregistering): Port device team_slave_1 removed [ 133.421777][ T72] team0 (unregistering): Port device team_slave_0 removed [ 134.422433][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.499866][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.577472][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.652318][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.746669][ T72] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.811562][ T72] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.858465][ T72] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.916211][ T72] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.009609][ T72] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.078281][ T72] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.148270][ T72] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.212128][ T72] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.332473][ T72] bridge_slave_1: left allmulticast mode [ 135.334562][ T72] bridge_slave_1: left promiscuous mode [ 135.336957][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.341595][ T72] bridge_slave_0: left allmulticast mode [ 135.343668][ T72] bridge_slave_0: left promiscuous mode [ 135.345786][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.351539][ T72] bridge_slave_1: left allmulticast mode [ 135.353598][ T72] bridge_slave_1: left promiscuous mode [ 135.355694][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.360699][ T72] bridge_slave_0: left promiscuous mode [ 135.362816][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.368208][ T72] bridge_slave_1: left allmulticast mode [ 135.369984][ T72] bridge_slave_1: left promiscuous mode [ 135.371540][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.374436][ T72] bridge_slave_0: left allmulticast mode [ 135.376291][ T72] bridge_slave_0: left promiscuous mode [ 135.378351][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.663986][ T72] geneve0 (unregistering): left promiscuous mode [ 136.177533][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.181261][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.184624][ T72] bond0 (unregistering): Released all slaves [ 136.256820][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.260572][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.263981][ T72] bond0 (unregistering): Released all slaves [ 136.268205][ T72] bond1 (unregistering): Released all slaves [ 136.899933][ T72] hsr_slave_0: left promiscuous mode [ 136.902160][ T72] hsr_slave_1: left promiscuous mode [ 136.904694][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.907481][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.910596][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.913051][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.916173][ T72] batman_adv: batadv0: Interface deactivated: vlan1 [ 136.917971][ T72] batman_adv: batadv0: Removing interface: vlan1 [ 136.921521][ T72] hsr_slave_0: left promiscuous mode [ 136.923334][ T72] hsr_slave_1: left promiscuous mode [ 136.925114][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.927121][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.929305][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.931236][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.934887][ T72] hsr_slave_0: left promiscuous mode [ 136.936784][ T72] hsr_slave_1: left promiscuous mode [ 136.938594][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.940530][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.942718][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.944651][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.989196][ T72] veth1_macvtap: left promiscuous mode [ 136.991707][ T72] veth0_macvtap: left promiscuous mode [ 136.993206][ T72] veth1_vlan: left promiscuous mode [ 136.994613][ T72] veth0_vlan: left promiscuous mode [ 136.996888][ T72] veth0_macvtap: left promiscuous mode [ 136.998409][ T72] veth1_vlan: left promiscuous mode [ 136.999898][ T72] veth0_vlan: left promiscuous mode [ 137.002018][ T72] veth1_macvtap: left promiscuous mode [ 137.003475][ T72] veth0_macvtap: left promiscuous mode [ 137.004946][ T72] veth1_vlan: left promiscuous mode [ 137.007784][ T72] veth0_vlan: left promiscuous mode [ 137.770835][ T72] team0 (unregistering): Port device team_slave_1 removed [ 137.850157][ T72] team0 (unregistering): Port device team_slave_0 removed [ 138.907570][ T72] team0 (unregistering): Port device team_slave_1 removed [ 138.978723][ T72] team0 (unregistering): Port device team_slave_0 removed [ 140.070866][ T72] team0 (unregistering): Port device team_slave_1 removed [ 140.141816][ T72] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 18:00:21 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc900032e77c8 RCX=0000000000000000 RDX=1ffff9200065cf02 RSI=0000000000000001 RDI=ffffffff81edda73 RBP=ffffc900032e7810 RSP=ffffc900032e77a8 R8 =ffffc900032e77fc R9 =ffffffff90b1abe8 R10=ffffc900032e77c8 R11=00000000000078a5 R12=ffffffff8178a250 R13=ffffc900032e7888 R14=0000000000000000 R15=ffff88802528a440 RIP=ffffffff815836a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005751199c CR3=0000000066620000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010002 RBX=0000001ebb379180 RCX=ffffffff8179fc05 RDX=ffff88801b764880 RSI=0000001ebb379180 RDI=0000000000000006 RBP=ffff88802b52d2f8 RSP=ffffc90000598e90 R8 =0000000000000006 R9 =0000001ebb379180 R10=7fffffffffffffff R11=0000000000000000 R12=0000000000000000 R13=ffff88802b52c9c0 R14=dffffc0000000000 R15=7fffffffffffffff RIP=ffffffff818cb8ef RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056392e6aae95 CR3=00000000005c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=29598c6f29598c6f 29598c6f29598c6f 29598c6f29598c6f 29598c6f29598c6f 29598c6f29598c6f 29598c6f29598c6f 29598c6f29598c6f 29598c6f29598c6f ZMM22=372beeaa372beeaa 372beeaa372beeaa 372beeaa372beeaa 372beeaa372beeaa 372beeaa372beeaa 372beeaa372beeaa 372beeaa372beeaa 372beeaa372beeaa ZMM23=cc89c644cc89c644 cc89c644cc89c644 cc89c644cc89c644 cc89c644cc89c644 cc89c644cc89c644 cc89c644cc89c644 cc89c644cc89c644 cc89c644cc89c644 ZMM24=c1159126c1159126 c1159126c1159126 c1159126c1159126 c1159126c1159126 c1159126c1159126 c1159126c1159126 c1159126c1159126 c1159126c1159126 ZMM25=44225f5644225f56 44225f5644225f56 44225f5644225f56 44225f5644225f56 44225f5644225f56 44225f5644225f56 44225f5644225f56 44225f5644225f56 ZMM26=4e0ee98f4e0ee98f 4e0ee98f4e0ee98f 4e0ee98f4e0ee98f 4e0ee98f4e0ee98f 4e0ee98f4e0ee98f 4e0ee98f4e0ee98f 4e0ee98f4e0ee98f 4e0ee98f4e0ee98f ZMM27=c13aa6ddc13aa6dd c13aa6ddc13aa6dd c13aa6ddc13aa6dd c13aa6ddc13aa6dd c13aa6ddc13aa6dd c13aa6ddc13aa6dd c13aa6ddc13aa6dd c13aa6ddc13aa6dd ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0104000001040000 0104000001040000 0104000001040000 0104000001040000 0104000001040000 0104000001040000 0104000001040000 0104000001040000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888025815360 RCX=0000000000000004 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888025815380 RBP=0000000000000001 RSP=ffffc900040777c0 R8 =0000000000000000 R9 =fffffbfff2d3218e R10=ffffffff96990c77 R11=0000000000000001 R12=0000000000000003 R13=ffff888025815360 R14=00000000000001bf R15=ffff888025814880 RIP=ffffffff81694e32 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f16e40 CR3=00000000211c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73abff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002491c5 RBX=0000000000000003 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed100376d488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801bb6a440 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020f65018 CR3=00000000211c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000