last executing test programs: 48.912749386s ago: executing program 2 (id=364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 48.698802259s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty]}) 41.546017184s ago: executing program 2 (id=364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 40.120396707s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty]}) 31.12185632s ago: executing program 2 (id=364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 30.412898802s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty]}) 24.153933177s ago: executing program 2 (id=364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 21.952920328s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty]}) 16.721424482s ago: executing program 2 (id=364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 14.201805805s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty]}) 5.819721189s ago: executing program 2 (id=364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d"], 0x10}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r6 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0xffff, 0x3, 0x3, 0x8, 0x0, @local}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7ff}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000300)='urity.\x15\x00\x00_\x1b\xcf\xff\xf9G\x84\x87D\x91\xff\xe0\xf3b\xe2\x8di\xc8qk\x80F\x86F\x9a\xc7\xe9\xec?\b\xe5\x93\x0e!P$D?(C\xc4\x87_\x9d\xe2S1\x0fV\xab*\xe9\xdfu\x8e\x1d\xe3\x82R\x82\x0f\xd6\xadb\xd7\xad\n\t\xb2\x06\xa5UK\xaa\xdc<\xc8\xfa\x17t\x15 Ui\xd9\xfd\xd0\xe9\xe8\xcc7\x10Bf\xc2\x8f\x85\x04\x0f\xf9\xac\x0e\xce\x93mJU\x03\xef[d\xdf\xbd)\xc6T\xc1y\x03\xd8(H\xa2~aP\x98\x01\vpi\x03\xac\xdcj5a\xc9\ru\x19La\xe8Y\xc3\x85\x01\xc1G*8\x04\xc9\x11\xab\xbd\v\x9d\xbfy\xfd\xc55\t\x11', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+.\x00', 0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) pipe(&(0x7f00000000c0)) mount$fuseblk(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, 0x1000810, &(0x7f0000000ac0)=ANY=[]) 4.54271927s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @empty]}) 2.523984581s ago: executing program 3 (id=572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ff900000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.523130692s ago: executing program 0 (id=573): r0 = inotify_init1(0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xfffffffffffffdf0, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x78, 0x40, 0x17, 0x40, 0xbb4, 0xa42, 0x9b44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x10, 0xe0, 0x84, [{{0x9, 0x4, 0x3b, 0x9, 0x0, 0x46, 0x6b, 0x12, 0x3}}]}}]}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) move_pages(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000100)=[0x4acea9bc, 0x35e3, 0x7fff, 0x9, 0x6, 0xbfa, 0x8], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 2.460046859s ago: executing program 0 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x141580) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000100)="670faefb0f01c2efda7905660f388202bad10466ed66b8000000000f23d80f21f86635c00000300f23f83e650f12d40f01c90f5c0c", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r4 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x10015d2, 0x30101}, &(0x7f0000000180), &(0x7f00000001c0)) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140), &(0x7f0000000200)=0x14) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0x2, 0xff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f00000002c0)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000040)) 2.45986376s ago: executing program 3 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_ts_info={0x49}}) 2.413911022s ago: executing program 3 (id=576): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB], 0x10) socket$kcm(0x2, 0x2, 0x73) 2.352066139s ago: executing program 3 (id=577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=r2, @ANYBLOB="a0d10500000000000a0001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48800) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) socket$rxrpc(0x21, 0x2, 0xa) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r9, 0x0, 0xa002a0}, 0x38) recvmmsg(r8, 0x0, 0x0, 0x0, &(0x7f0000000740)) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r7], 0xffffffffffffff2b) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.993798272s ago: executing program 0 (id=578): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000003128cdd0d1571cc080e0733600d15700"/35, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0500"/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x103, 0x7cd973e6c5384a28, {0x6, 0x1, 0x1, 0x1}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000006000000000000000000000000000000009b0000000000e1f1f9de95d09b1ecb2959777fd02fee1aa09054a6e8076c0975db6fe26fb304a065915cffd7d32c728048b871f4bfcb017811e73e151a6990fa056d7141ee73215c28e56b72addd84f0ece51762f02064cb4c72bdb8452cfe1b82"], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000014608f0ff76000000bf981a0000000000560800000100000007000000b7000000003406a49746141915000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket(0x21, 0x2, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x18, 0x0, 0x0) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x70) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240), 0x0) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117) 1.075147661s ago: executing program 3 (id=579): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) syz_io_uring_setup(0x32e9, &(0x7f0000000b80)={0x0, 0x873f, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.freeze\x00', 0x275a, 0x0) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f91877"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000a2e60b03f8d99c179ba7861c9800beb6e3766d1afc375a10ff07f45375ef20fbb88e851b6a68b0afac468aee5afc99544db8c6d15898f080ded41e8468b5", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="02000010011000"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) 913.543123ms ago: executing program 0 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd(0x17) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000000)={0x10200, 0x0, 0x40, &(0x7f00000005c0)=[0x4, 0x5, 0x101, 0x90000000, 0xb3, 0x7, 0x4, 0x80, 0x6, 0x9, 0x80, 0xfff, 0xe0000000000, 0xfffffffffffffff7, 0xfff, 0x2, 0x1, 0x0, 0xa, 0x3, 0x9a, 0x15, 0x0, 0x400, 0x81, 0x400000000, 0x6, 0x6, 0x6, 0x4, 0x8, 0x8, 0x8, 0x53, 0x5, 0x8000, 0x4, 0xec61, 0x8, 0x1fe, 0x69e, 0x9, 0x6, 0x7, 0x4, 0xb, 0x8, 0x9, 0x8, 0x10000, 0x6, 0xfff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x100, 0x8, 0x0, 0x7, 0x4f, 0x3, 0x0, 0x6, 0x7, 0x5, 0x9db, 0x8, 0x80000001, 0x5, 0x2c000000, 0x2, 0x1, 0x5, 0x7f, 0x0, 0x100, 0xffffffffffffffff, 0x6, 0x6, 0x5, 0xa293, 0x1, 0x40, 0xa, 0x8001, 0x8, 0x8, 0xffffffff, 0x7, 0x5, 0x956, 0xfffffffffffffffd, 0xfff, 0x400000000032, 0x2, 0x4, 0x7, 0x5, 0x3, 0x5, 0x8000020000000000, 0x4, 0x80000001, 0x79, 0x25f, 0x9, 0x800, 0x83b, 0xbb, 0x9, 0x2796, 0x5, 0x7, 0x6, 0x8, 0x51e, 0x6, 0x3, 0x3, 0x9, 0x7, 0x2, 0x48, 0x4, 0x8, 0x9]}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000000)={0x10200, 0x0, 0x40, &(0x7f00000005c0)=[0x4, 0x5, 0x101, 0x90000000, 0xb3, 0x7, 0x4, 0x80, 0x6, 0x9, 0x80, 0xfff, 0xe0000000000, 0xfffffffffffffff7, 0xfff, 0x2, 0x1, 0x0, 0xa, 0x3, 0x9a, 0x15, 0x0, 0x400, 0x81, 0x400000000, 0x6, 0x6, 0x6, 0x4, 0x8, 0x8, 0x8, 0x53, 0x5, 0x8000, 0x4, 0xec61, 0x8, 0x1fe, 0x69e, 0x9, 0x6, 0x7, 0x4, 0xb, 0x8, 0x9, 0x8, 0x10000, 0x6, 0xfff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x100, 0x8, 0x0, 0x7, 0x4f, 0x3, 0x0, 0x6, 0x7, 0x5, 0x9db, 0x8, 0x80000001, 0x5, 0x2c000000, 0x2, 0x1, 0x5, 0x7f, 0x0, 0x100, 0xffffffffffffffff, 0x6, 0x6, 0x5, 0xa293, 0x1, 0x40, 0xa, 0x8001, 0x8, 0x8, 0xffffffff, 0x7, 0x5, 0x956, 0xfffffffffffffffd, 0xfff, 0x400000000032, 0x2, 0x4, 0x7, 0x5, 0x3, 0x5, 0x8000020000000000, 0x4, 0x80000001, 0x79, 0x25f, 0x9, 0x800, 0x83b, 0xbb, 0x9, 0x2796, 0x5, 0x7, 0x6, 0x8, 0x51e, 0x6, 0x3, 0x3, 0x9, 0x7, 0x2, 0x48, 0x4, 0x8, 0x9]}) 771.790775ms ago: executing program 0 (id=581): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500001c0000000000029078ac1414aa2200907800000000"], 0x0) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0xd) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000280)=""/4096, 0x1000, 0x0) 764.319957ms ago: executing program 0 (id=582): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x1}, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'veth1_vlan\x00', {0x2}, 0x9}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(', @ANYRES64=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 0s ago: executing program 3 (id=583): sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_send_signal(0xffffffffffffffff, 0x20002, 0x0, 0x3) sendmmsg$alg(r1, &(0x7f0000001480)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="7bfd5bd2d23a389d87bb264b88394ea546f6d9baacf3ce39caa8eed533bab176c09a3776501c7fd936ab05321c56924551e21fa139080230cfa411484241933985d79656f21f5a", 0x47}, {&(0x7f0000000440)="00f4bf54beebeaaeb894af77b7197505d167ddb4ab9716afee49a433d671e17b5b5fc5604d8029edd11744331d5e29e2e5f8250fbe28ac6965f388904e47d67198fed2628c51dfb02bfca88c8130d35c7f5a7540db6c2bdf8a753a1512908a4bbc0598cb10e65083cda9548a7b9676a261e614ca4b952af1453b5b6b6658223640d010a9861402fd8535fc75b3", 0x8d}, {&(0x7f0000000500)="461b247a4df6b9a55d25932b7eb864fac8dc02d819c357c924b59d274242aca4911a92e6f8fe496674df8d0106e252a8553436266594cc41c60a5ebc611bef481d22128b3b661945ff1d0cb55d243d73fa9ab6dacea61a2da29df5e2d666016b491de8e128bf57d67cfa3eed7fe8190e33ced620704f4342884c35fef0bc7ce76243ec50ab12798eb74193d53187c7cd5f0faa5cf2cb86ae07375d00982ca176452d7f50a3fc26852344766b6778fec77685ddd469d688f297591b5d1019c63be6941f", 0xc3}, {&(0x7f0000000240)="e7237c0ae1475f4dc4d38ceea70d4c3eec2e1fe2f153af5357d1d2fb518b9ad0c4b730c0047856626ddda7d5353b5072ac7862d8374522fb171dd4c1e811", 0x3e}, {&(0x7f0000000600)="51ad7bc5059d6bb0d096400e8d5b38c8df8fb9680973319973f88d8850f14f9d78e53008f04bfe2aabed9cb6f6d7842ccbfb640628e0a4f57fcd8cefc05a8240e55e8e3dd3220e718c496010f46df754bc10fb030caf5e8d520a48fbac67610c5f47cef391731da2f6fe04d017bea8b8310c7feda93d5c35e9135b260068ec4c9f145a866e9b7778a333ea7c3bf6f20953486335620ffc30b6a392c95bd3b266be255854ddd9cfd7a6a862841196f4de46265c4c789b361c1010b9c6710defad1f498978765e67a6c730a6e8", 0xcc}, {&(0x7f0000000700)="eca0b82b819861d452963b6aa353a562eddb77c315c7c590ceb330985b9e0cc4bd96cf74f422d77f4552d5cde4f464fcdc116beb69868df96caf1ba72375636c43f74e5507463571c8302b0c80e9f987175255c9ce7a99fd7d55799158993742d26a2239ba8487c2a08b920266028b0176710657d06c8103db364fdd3676d45d80c51b5a04f0e422d2b8a86eda5dea269db2e1a32782c41459562e0d211470be2a3114e5f535d41fc1331091ebc915080e2d109980f38b90048b1e49828b95352d13a97216e88a", 0xc7}, {&(0x7f0000000800)="c54576b8a10f370871551992864d6f2b51596d9802eee0095c1b3b2a43da3a21c49044acd1edcb5a41654acb61b44550dee6da37c05131366c7f876932db4f080a1df694f05b56a4e24c01b32029a1b1a5e5c7951f2b10f512d4c3aef4670614e0b0e9ff9a3349e0da45e05b9ad647bcd8b3a14ecaecef736a8748799f533552433a9d00b34a90bf022f9d6793fa45541fd219cc28", 0x95}], 0x7, &(0x7f0000000940)=[@iv={0x30, 0x117, 0x2, 0x1d, "7ecdf1ce4f51ca1df369fbfa032a27b211e7f4a04861c73eb674387ad8"}, @op={0x10}, @iv={0xc0, 0x117, 0x2, 0xaf, "f738efc308a1ae2d41e05fa15c95f268f9b6fb3696b3062c6b4aad9ab35d8752e3b75e13640d3710611cd54134ffcbafcfc788c24e42d30a9217c26198810fd1180e09dd0dd51b8ba1e64639f6fb1709f5d53ae3b0f6cb47047461c8f1149f7a734d06d4f90e4d27d74fadae48e5d1392695a80255891ed7da2f0e8827969e58ac05e743230cf04590f3ed23e1ab7f82f38758ed86f9af9e0717ae10af50df44446f409a4885ea364e66b19c7ecc0d"}, @assoc={0x10, 0x117, 0x4, 0x5}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x8c, 0x117, 0x2, 0x7b, "91b7e657769f24ae3d780c38fde3fea7e1461b65f92c187ec89feb49eb83c8fe3be69180bfc326bf2f15c12dfa4a0ee20f9ca4ffe7ad6829b72691c9771e4989902c47761546bca2b25049e6c3b4c42aecd4483b561bad52304c99fd834927951324c61d7479a0f5bdad055bf53ac4479831b301e33c5095553677"}, @iv={0x2c, 0x117, 0x2, 0x1b, "a15c04d58a5db136c913c4c4b4da626284436473b85eaf4e84de3a"}], 0x1d8, 0xc0}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)="250a4da8adeb2bf625dd4a6bce8794627693243f620dcc8581cd0919e2cb125ebe0b64b62f715b229a182b21bda12e907c7851", 0x33}, {&(0x7f0000000b80)="a7db77ada14044c86a3ffafcbe0220f321a9355d1f7b319eb1074288288e46518991f577b9edd240ba11936cbfd3bbd587f21f30d708c43e50d6e5ff6eae79b7854c3083304f2582f0c109da1e43cd95ec37e827dd973765865946eb3f0bd302bef9024916b085afd1ac035d01076b0f5779e35fd8e81f29b694868fa2c3b46d0c2d647e21278c76f31b609dc10b9b2d20b0bb905879e5f08e46c8db73e43aa212b99238678004cb002fba904f39a281fc2c8851a41dec25", 0xb8}], 0x2, &(0x7f0000000c80)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x2}, @iv={0xa8, 0x117, 0x2, 0x97, "9e118d80e9bbdc16454733c04d31ad767306cad8107914f798c6aa83649d4f86e5a7c683ca34a17fe30eb98199b9e8a953d4ad00df6e484733bcbb1c28fd39ccab0b9e5193ddc180ffe0d273c5aa361a024ef0f0c706069555e99a49fc99ef7ea4850151d6506696fe37d9db48f31468e9bd661c8b96aeebe4101ab5cf2fb4c92593faf2efb43f6ca5a82ddb02b342addbdd480389bd4b"}], 0xc8, 0x8664204407a6d3e9}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d80)="a6a520a1cbd576593ab35b77ce57c527ea7150a07cd7724492ced30b9a46305ebf4e65d1fe9cdac1976cb40eaa9a8720b88e72e400880af61ff51feca121d938a8174d75de9ca0df84b0f4c82fdd6668b2342ae7e02119b1c0ca85bdb4981a3232e2929f8d952461b3de2a43c124c079cb44f142d919e63e253ddb5a58866ba6271669c377dd6c6e4fbcdf5edb3666818bd67afdfdfb247ebd2040128e0cf76a1f72679971b4b9d1abcc76212fd587ac87508a462ceccac367572a3c9b278422064e28583d9975f2328b7ac6e5b4cb2084e01a192691385d321b8005", 0xdc}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000e80)="d116a8ea4b0563a8765da7741c9a37256030d6250b0c7b80c5ddda7d2dd16b84f319138bc9232cd78e498c50a4e93e6d325fa801f6a675e4d5e0e25ad5c27360eccefb9de0fca45bf57e122b7b9a7a4f6c32a0edf1cedbf507b63cfbc87db5c6e83619398f7ff4919904f18ea5ddac52b0888a1beebe890d0315bd149b6e79356d0ea67e0b4080ca1ee50f8f12bca8e8ed79ce73643d544f3514e194c5d812ffb216728bfc4f74a2d4b29d5daad9b055f941146f205d60418d9257937e2b7701ebc661d4fddddf01eaacbb13722c30d424fdb243367fe44929", 0xd9}, {&(0x7f0000000f80)="d9b159303fb2197b805bf80537a1efbddf231ffbfdeb3dd2a85b0226da37000f07fcc05d945936bbbb53070f15650b6082", 0x31}], 0x4, &(0x7f0000001000)=[@assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10}, @op={0x10}, @iv={0xa8, 0x117, 0x2, 0x96, "e7c60e7fbcf3844de569f2ff3cb6db46f270ebae771598b2d10b33400a79dd0acd1a68fad64313ece57fd4a4720cffbd0be1cade12241eff71f4c71374c35013c74a15a6301671422aedc2a1e351e219839482c033560e520e60cee8fe96c3587bb6694552641fa48339b06161c8c523773ac375d85bc5a8318e54f70d395b0c8d91f0d30589e8a4c9b89e55dee88071a0c0066ccfd8"}, @op={0x10, 0x117, 0x3, 0x1}], 0xe8, 0x4000044}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="c01e9672d88bca9fba7b1051534b0be342bc8965dedcdd5ee40f0a3975518005d7e2c6c8eadf1d8f98878aab826593571043efe44f343e03b85f72ce92a0f3e6cf84373e8333e3ab139c09b0c031297c348924425fce5b4c45ce0b77806ff647e71126570d04d3e20c2a8fe9fa44443381413ca629d0b7b81d7d4422a7a857e62d", 0x81}, {&(0x7f00000011c0)="c5738d8efe38d5f32739d2569027f5f34cbf58bf2d26d76af6a44db7ae98c29f9aa3b34a0c5631f56b59725cde2a284401fe58fb24c14d97c1c1573768d1cedad8d3ad28cf46796cfcfa7f5fccc80d3f259f9135531bc61e99ab2f40fbfd68dce2647a535879b8a16bdf06280fb75f6fbd779caf8da20e743115e91e1893a86c0330", 0x82}, {&(0x7f0000001280)="6ce67d327c3e5bd61054ab546c50a2b1b92d26c3de485b58e4913c023b86b60e39084c4de572de66186f581f7e5d48069a7250", 0x33}], 0x3, &(0x7f0000001300)=[@op={0x10}, @iv={0xb8, 0x117, 0x2, 0xa7, "6a348c837081d5d772ca19ad17ccb50d950543dcbbc93bb2847539c1c5321dae7f6b41cbf6b5531852490eeb5e571d0bd0a36abfe820b500983a9056a1b28953a71821133874d05d7f7c77fca2b3ddafc14fdaa66bdbed48521383ab42d9b5b257fbe3021e5d6790fb2fc3307471a5d6f35586333cc386c16c33213d142a80d3fc6d30c00ba3a28b35498defcd4bcc9bc09d93968d33470f258fe2394f6a13623319a5fedfa22e"}], 0xc8, 0x4000000}, {0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001400)="484c7b73d703f2f628fe10566832eb6bd95ff77459509d9285237e6dc8f30bc36c", 0x21}], 0x1, &(0x7f0000002600)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xc}, @iv={0x8c, 0x117, 0x2, 0x79, "e8adbd271acc64b76a1c3ac018d15a6092caea6c250a2eebed2cfbbd06cfb654ee2b6437f08c4a9e579791618c86a29654c71016942f06d51ff441ff9f9fa20f7b928e767a41483658ef3410d7d63d75aca4572d16414eb30d10db2a75a6d6f08d0c068bf0a5d967b62d04b4b680d59789c25d588a669d046a"}, @iv={0x48, 0x117, 0x2, 0x37, "c60b103502f826065b828d54ae780c561b3e794588e31ee46f2e8007b943ad6fc866e5e239f17ab15368b4fb89b9bcd20fb540d85b9af9"}, @op={0x10}], 0x114, 0x1}], 0x5, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x1, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) connect$inet(r4, &(0x7f0000002740)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd, 0xc7, 0x1, 0x1ff, 0x6}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000080)="99197136980357d6f0a953d545af1ea4896a157f14194726babe82dbfe620031b9c7372ef2c6b039cea100235e09f84ac48e28b0fc8168298d7b95a4defd4b89818a79dfb3801549b28e4b0e5e9f2544e74b53a50a5625febf1f4d6886a1f760ff38d089", 0x64}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): 0:50:50:50:50:50 [ 124.382692][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.386247][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.505369][ T46] hsr_slave_0: left promiscuous mode [ 124.507330][ T46] hsr_slave_1: left promiscuous mode [ 124.509229][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.511335][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.514656][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.517462][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.548279][ T46] veth1_macvtap: left promiscuous mode [ 124.550456][ T46] veth0_macvtap: left promiscuous mode [ 124.552913][ T46] veth1_vlan: left promiscuous mode [ 124.555261][ T46] veth0_vlan: left promiscuous mode [ 124.795458][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 124.885467][ T5946] Bluetooth: hci1: command tx timeout [ 124.965998][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 124.971686][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 124.974883][ T10] usb 5-1: can't read configurations, error -22 [ 125.106595][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 125.208564][ T40] audit: type=1326 audit(1751216212.912:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.3.398" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf711e579 code=0x0 [ 125.276386][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 125.280019][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 125.282377][ T10] usb 5-1: can't read configurations, error -22 [ 125.284850][ T10] usb usb5-port1: attempt power cycle [ 125.289665][ T46] team0 (unregistering): Port device team_slave_1 removed [ 125.349563][ T46] team0 (unregistering): Port device team_slave_0 removed [ 125.625522][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.648242][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 125.652412][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 125.656125][ T10] usb 5-1: can't read configurations, error -22 [ 125.785457][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 125.816147][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 125.824931][ T7830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.828397][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 125.831669][ T10] usb 5-1: can't read configurations, error -22 [ 125.833700][ T7920] lo speed is unknown, defaulting to 1000 [ 125.834468][ T10] usb usb5-port1: unable to enumerate USB device [ 125.869946][ T7830] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.893876][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.897004][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.908761][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.910998][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.044675][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.069532][ T7830] veth0_vlan: entered promiscuous mode [ 126.083579][ T7830] veth1_vlan: entered promiscuous mode [ 126.106062][ T7830] veth0_macvtap: entered promiscuous mode [ 126.109928][ T7830] veth1_macvtap: entered promiscuous mode [ 126.124386][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.134173][ T7830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.139561][ T7830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.142328][ T7830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.145049][ T7830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.147903][ T7830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.188096][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.191289][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.212674][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.216408][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.390863][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.206955][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.474434][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.480156][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.484072][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.489022][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.493657][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.524881][ T7930] lo speed is unknown, defaulting to 1000 [ 127.699489][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.739552][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.744002][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.747385][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.751281][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.753914][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.788340][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.842280][ T7944] lo speed is unknown, defaulting to 1000 [ 127.844967][ T7930] chnl_net:caif_netlink_parms(): no params data found [ 128.098517][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.101443][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.104480][ T7930] bridge_slave_0: entered allmulticast mode [ 128.108102][ T7930] bridge_slave_0: entered promiscuous mode [ 128.130503][ T7930] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.133579][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.138952][ T7930] bridge_slave_1: entered allmulticast mode [ 128.143608][ T7930] bridge_slave_1: entered promiscuous mode [ 128.289443][ T7930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.316255][ T7930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.369932][ T46] bridge_slave_1: left allmulticast mode [ 128.372288][ T46] bridge_slave_1: left promiscuous mode [ 128.374700][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.384008][ T46] bridge_slave_0: left allmulticast mode [ 128.388800][ T46] bridge_slave_0: left promiscuous mode [ 128.391234][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.679022][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.683808][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.689592][ T46] bond0 (unregistering): Released all slaves [ 128.774896][ T7930] team0: Port device team_slave_0 added [ 128.780242][ T7930] team0: Port device team_slave_1 added [ 128.862540][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.865539][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.875857][ T7930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.905691][ T7930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.908933][ T7930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.923760][ T7930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.933062][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 129.029752][ T7966] xfrm0: entered promiscuous mode [ 129.059571][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 129.155477][ T7930] hsr_slave_0: entered promiscuous mode [ 129.158606][ T7930] hsr_slave_1: entered promiscuous mode [ 129.161497][ T7930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.164687][ T7930] Cannot create hsr debugfs directory [ 129.329792][ T46] hsr_slave_0: left promiscuous mode [ 129.332918][ T46] hsr_slave_1: left promiscuous mode [ 129.339472][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.342579][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.346545][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.349753][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.388072][ T46] veth1_macvtap: left promiscuous mode [ 129.390470][ T46] veth0_macvtap: left promiscuous mode [ 129.392907][ T46] veth1_vlan: left promiscuous mode [ 129.395167][ T46] veth0_vlan: left promiscuous mode [ 129.468065][ T40] audit: type=1326 audit(1751216217.172:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.406" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 129.516174][ T5948] Bluetooth: hci0: command tx timeout [ 129.835723][ T5948] Bluetooth: hci1: command tx timeout [ 130.094393][ T46] team0 (unregistering): Port device team_slave_1 removed [ 130.165712][ T46] team0 (unregistering): Port device team_slave_0 removed [ 130.678600][ T7985] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.682305][ T7985] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.685786][ T7985] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.689274][ T7985] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.741349][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.744274][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.748217][ T7944] bridge_slave_0: entered allmulticast mode [ 130.751819][ T7944] bridge_slave_0: entered promiscuous mode [ 130.757202][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.760148][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.763119][ T7944] bridge_slave_1: entered allmulticast mode [ 130.767021][ T7944] bridge_slave_1: entered promiscuous mode [ 130.851242][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.871574][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.949212][ T7944] team0: Port device team_slave_0 added [ 130.981339][ T7944] team0: Port device team_slave_1 added [ 131.078399][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.081053][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.089675][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.094044][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.096632][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.104778][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.179290][ T7944] hsr_slave_0: entered promiscuous mode [ 131.182363][ T7944] hsr_slave_1: entered promiscuous mode [ 131.185232][ T7944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.195286][ T7944] Cannot create hsr debugfs directory [ 131.336317][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.420515][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.582836][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.605550][ T5948] Bluetooth: hci0: command tx timeout [ 131.680617][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.809004][ T40] audit: type=1800 audit(1751216219.512:268): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.414" name="file1" dev="tmpfs" ino=768 res=0 errno=0 [ 131.810793][ T8032] netlink: 224 bytes leftover after parsing attributes in process `syz.3.414'. [ 131.840698][ T46] bridge_slave_1: left allmulticast mode [ 131.842479][ T46] bridge_slave_1: left promiscuous mode [ 131.844689][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.849235][ T46] bridge_slave_0: left allmulticast mode [ 131.850968][ T46] bridge_slave_0: left promiscuous mode [ 131.852900][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.926053][ T5948] Bluetooth: hci1: command tx timeout [ 132.075512][ T5981] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 132.148876][ T8049] random: crng reseeded on system resumption [ 132.153623][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.167355][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.172677][ T46] bond0 (unregistering): Released all slaves [ 132.237346][ T5981] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 132.248025][ T5981] usb 5-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 132.276609][ T5981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.288067][ T5981] usb 5-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 132.291756][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.317959][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.325443][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.332017][ T5981] usb 5-1: config 0 descriptor?? [ 132.336262][ T8035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.547357][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.550087][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.558031][ T5981] usbhid 5-1:0.0: can't add hid device: -71 [ 132.559881][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.574745][ T5981] usb 5-1: USB disconnect, device number 16 [ 132.650757][ T46] hsr_slave_0: left promiscuous mode [ 132.653787][ T46] hsr_slave_1: left promiscuous mode [ 132.655927][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.658277][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.661089][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.663413][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.697252][ T46] veth1_macvtap: left promiscuous mode [ 132.699570][ T46] veth0_macvtap: left promiscuous mode [ 132.702021][ T46] veth1_vlan: left promiscuous mode [ 132.704161][ T46] veth0_vlan: left promiscuous mode [ 133.085432][ T5981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 133.255885][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 133.264554][ T5981] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 133.269338][ T5981] usb 5-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 133.274376][ T5981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.277593][ T5981] usb 5-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 133.281479][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.286212][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 133.290907][ T5981] usb 5-1: config 0 descriptor?? [ 133.308409][ T5981] hub 5-1:0.0: bad descriptor, ignoring hub [ 133.310401][ T5981] hub 5-1:0.0: probe with driver hub failed with error -5 [ 133.429319][ T46] team0 (unregistering): Port device team_slave_1 removed [ 133.513322][ T46] team0 (unregistering): Port device team_slave_0 removed [ 133.675505][ T5948] Bluetooth: hci0: command tx timeout [ 133.942026][ T5981] plantronics 0003:047F:C055.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.0-1/input0 [ 133.995683][ T5948] Bluetooth: hci1: command tx timeout [ 134.037784][ T8035] netlink: 'syz.0.415': attribute type 10 has an invalid length. [ 134.088500][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 134.211483][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.215243][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.223248][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.226303][ T8035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.230429][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.233478][ T8035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.239835][ T8035] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.242665][ T8086] bond2: left allmulticast mode [ 134.244402][ T8086] bond2: left promiscuous mode [ 134.246521][ T8086] bridge0: port 4(bond2) entered disabled state [ 134.250560][ T8086] bond1: left allmulticast mode [ 134.252204][ T8086] bond1: left promiscuous mode [ 134.253857][ T8086] bridge0: port 3(bond1) entered disabled state [ 134.257770][ T8086] bridge_slave_1: left allmulticast mode [ 134.259594][ T8086] bridge_slave_1: left promiscuous mode [ 134.261470][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.265167][ T8086] bridge_slave_0: left allmulticast mode [ 134.267360][ T8086] bridge_slave_0: left promiscuous mode [ 134.269923][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.284549][ T8086] bond0: (slave bridge0): Releasing backup interface [ 134.418518][ T6075] IPVS: starting estimator thread 0... [ 134.444079][ T7944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.449880][ T7944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.454218][ T7944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.458872][ T7944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.475674][ T6023] usb 5-1: USB disconnect, device number 17 [ 134.505533][ T8090] IPVS: using max 43 ests per chain, 103200 per kthread [ 134.546942][ T7930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.555791][ T7930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.567664][ T7930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.574660][ T7930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.625143][ T7944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.645947][ T7944] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.653261][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.655575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.662718][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.665004][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.684061][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.703140][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.721248][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.724301][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.765364][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.768242][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.790592][ T8107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.426'. [ 134.928436][ T7944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.957153][ T7944] veth0_vlan: entered promiscuous mode [ 134.962813][ T7944] veth1_vlan: entered promiscuous mode [ 135.005258][ T7944] veth0_macvtap: entered promiscuous mode [ 135.018109][ T7944] veth1_macvtap: entered promiscuous mode [ 135.052054][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.082665][ T7944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.088585][ T7944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.091406][ T7944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.094029][ T7944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.098303][ T7944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.112871][ T7930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.169256][ T7930] veth0_vlan: entered promiscuous mode [ 135.172959][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.177865][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.178925][ T1249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.182860][ T1249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.185106][ T7930] veth1_vlan: entered promiscuous mode [ 135.216439][ T7930] veth0_macvtap: entered promiscuous mode [ 135.222223][ T7930] veth1_macvtap: entered promiscuous mode [ 135.238058][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.247179][ T7930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.254625][ T7930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.259268][ T7930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.262893][ T7930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.266544][ T7930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.445686][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.451186][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.494204][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.499209][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.866916][ T8142] new mount options do not match the existing superblock, will be ignored [ 135.875813][ T8142] Attempt to restore checkpoint with obsolete wellknown handles [ 135.879223][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 135.883317][ T8142] IPVS: Error joining to the multicast group [ 135.887458][ T8142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.434'. [ 135.937548][ T8143] block device autoloading is deprecated and will be removed. [ 136.351665][ T40] audit: type=1326 audit(1751216224.052:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8131 comm="syz.3.432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7fc00000 [ 136.449934][ T8148] lo speed is unknown, defaulting to 1000 [ 136.729481][ T8152] mmap: syz.3.436 (8152) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.935281][ T8158] xfs: Unknown parameter 'usrquota' [ 137.044529][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 137.309323][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.613010][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.616883][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.620118][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.624585][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.628543][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.646808][ T8166] lo speed is unknown, defaulting to 1000 [ 137.735296][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 137.823774][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.826318][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.828649][ T8166] bridge_slave_0: entered allmulticast mode [ 137.831320][ T8166] bridge_slave_0: entered promiscuous mode [ 137.834474][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.836906][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.839222][ T8166] bridge_slave_1: entered allmulticast mode [ 137.841824][ T8166] bridge_slave_1: entered promiscuous mode [ 137.875692][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.880254][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.916983][ T8166] team0: Port device team_slave_0 added [ 137.922157][ T8166] team0: Port device team_slave_1 added [ 137.963625][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.966838][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.975681][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.979933][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.982105][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.990193][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.031366][ T8166] hsr_slave_0: entered promiscuous mode [ 138.033615][ T8166] hsr_slave_1: entered promiscuous mode [ 138.036302][ T8166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.038988][ T8166] Cannot create hsr debugfs directory [ 138.508982][ T8178] FAULT_INJECTION: forcing a failure. [ 138.508982][ T8178] name failslab, interval 1, probability 0, space 0, times 1 [ 138.513608][ T8178] CPU: 2 UID: 0 PID: 8178 Comm: syz.0.442 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 138.513623][ T8178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.513630][ T8178] Call Trace: [ 138.513634][ T8178] [ 138.513639][ T8178] dump_stack_lvl+0x16c/0x1f0 [ 138.513658][ T8178] should_fail_ex+0x512/0x640 [ 138.513676][ T8178] should_failslab+0xc2/0x120 [ 138.513686][ T8178] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 138.513702][ T8178] ? skb_clone+0x190/0x3f0 [ 138.513720][ T8178] skb_clone+0x190/0x3f0 [ 138.513736][ T8178] netlink_deliver_tap+0xabd/0xd30 [ 138.513750][ T8178] netlink_unicast+0x6b2/0x7f0 [ 138.513763][ T8178] ? __pfx_netlink_unicast+0x10/0x10 [ 138.513778][ T8178] nfnetlink_unicast+0x52/0xa0 [ 138.513791][ T8178] ip_set_byindex+0x6d1/0x9c0 [ 138.513809][ T8178] ? __pfx_ip_set_byindex+0x10/0x10 [ 138.513823][ T8178] ? find_held_lock+0x2b/0x80 [ 138.513836][ T8178] nfnetlink_rcv_msg+0x9f9/0x1200 [ 138.513854][ T8178] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.513869][ T8178] ? consume_skb+0xcc/0x100 [ 138.513891][ T8178] ? __pfx___dev_queue_xmit+0x10/0x10 [ 138.513908][ T8178] netlink_rcv_skb+0x155/0x420 [ 138.513919][ T8178] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.513932][ T8178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.513950][ T8178] ? ns_capable+0xd7/0x110 [ 138.513962][ T8178] nfnetlink_rcv+0x1b3/0x430 [ 138.513974][ T8178] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 138.513986][ T8178] ? netlink_deliver_tap+0x1ae/0xd30 [ 138.513999][ T8178] netlink_unicast+0x53d/0x7f0 [ 138.514011][ T8178] ? __pfx_netlink_unicast+0x10/0x10 [ 138.514026][ T8178] netlink_sendmsg+0x8d1/0xdd0 [ 138.514039][ T8178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.514051][ T8178] ? __import_iovec+0x1dd/0x650 [ 138.514070][ T8178] ____sys_sendmsg+0xa98/0xc70 [ 138.514083][ T8178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.514094][ T8178] ? get_compat_msghdr+0x11a/0x170 [ 138.514116][ T8178] ___sys_sendmsg+0x134/0x1d0 [ 138.514132][ T8178] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.514154][ T8178] ? find_held_lock+0x2b/0x80 [ 138.514172][ T8178] __sys_sendmsg+0x16d/0x220 [ 138.514187][ T8178] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.514208][ T8178] ? rcu_is_watching+0x12/0xc0 [ 138.514221][ T8178] __do_fast_syscall_32+0x7c/0x3a0 [ 138.514238][ T8178] do_fast_syscall_32+0x32/0x80 [ 138.514253][ T8178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.514266][ T8178] RIP: 0023:0xf70de579 [ 138.514275][ T8178] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 138.514285][ T8178] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 138.514295][ T8178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002cc0 [ 138.514301][ T8178] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.514307][ T8178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.514313][ T8178] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.514318][ T8178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.514331][ T8178] [ 138.646498][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.652303][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.660972][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.664761][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.668808][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.709012][ T8182] lo speed is unknown, defaulting to 1000 [ 138.817422][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 138.896829][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.899087][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.901263][ T8182] bridge_slave_0: entered allmulticast mode [ 138.903816][ T8182] bridge_slave_0: entered promiscuous mode [ 138.907357][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.909581][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.911780][ T8182] bridge_slave_1: entered allmulticast mode [ 138.914351][ T8182] bridge_slave_1: entered promiscuous mode [ 138.947579][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.951983][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.985791][ T8182] team0: Port device team_slave_0 added [ 138.992088][ T8182] team0: Port device team_slave_1 added [ 139.025123][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.028684][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.036698][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.040747][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.042904][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.052603][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.102327][ T8182] hsr_slave_0: entered promiscuous mode [ 139.104591][ T8182] hsr_slave_1: entered promiscuous mode [ 139.106730][ T8182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.109124][ T8182] Cannot create hsr debugfs directory [ 139.269118][ T40] audit: type=1326 audit(1751216226.972:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.447" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de579 code=0x0 [ 139.347747][ T8199] lo speed is unknown, defaulting to 1000 [ 139.483423][ T8204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.448'. [ 139.575616][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.659872][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.675558][ T5948] Bluetooth: hci0: command tx timeout [ 139.676086][ T40] audit: type=1326 audit(1751216227.382:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.686961][ T40] audit: type=1326 audit(1751216227.382:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.696459][ T40] audit: type=1326 audit(1751216227.382:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.703269][ T40] audit: type=1326 audit(1751216227.382:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.710232][ T40] audit: type=1326 audit(1751216227.382:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.720304][ T40] audit: type=1326 audit(1751216227.382:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.727485][ T40] audit: type=1326 audit(1751216227.382:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.736737][ T40] audit: type=1326 audit(1751216227.382:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.0.450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.752579][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.785412][ T6023] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 139.870196][ T46] bridge_slave_1: left allmulticast mode [ 139.873304][ T46] bridge_slave_1: left promiscuous mode [ 139.876227][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.881866][ T46] bridge_slave_0: left allmulticast mode [ 139.884137][ T46] bridge_slave_0: left promiscuous mode [ 139.886949][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.925523][ T6023] usb 8-1: device descriptor read/64, error -71 [ 140.141648][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.146400][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.150004][ T46] bond0 (unregistering): Released all slaves [ 140.155860][ T6023] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 140.286937][ T6023] usb 8-1: device descriptor read/64, error -71 [ 140.395741][ T6023] usb usb8-port1: attempt power cycle [ 140.428333][ T46] hsr_slave_0: left promiscuous mode [ 140.431125][ T46] hsr_slave_1: left promiscuous mode [ 140.433233][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.438446][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.441501][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.443859][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.468554][ T46] veth1_macvtap: left promiscuous mode [ 140.470624][ T46] veth0_macvtap: left promiscuous mode [ 140.472414][ T46] veth1_vlan: left promiscuous mode [ 140.474564][ T46] veth0_vlan: left promiscuous mode [ 140.718366][ T5948] Bluetooth: hci1: command tx timeout [ 140.738435][ T6023] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 140.766083][ T6023] usb 8-1: device descriptor read/8, error -71 [ 141.005458][ T6023] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 141.026194][ T6023] usb 8-1: device descriptor read/8, error -71 [ 141.135608][ T6023] usb usb8-port1: unable to enumerate USB device [ 141.170966][ T46] team0 (unregistering): Port device team_slave_1 removed [ 141.244471][ T46] team0 (unregistering): Port device team_slave_0 removed [ 141.756205][ T5948] Bluetooth: hci0: command tx timeout [ 141.844582][ T8231] netlink: zone id is out of range [ 141.849314][ T8231] netlink: zone id is out of range [ 141.851819][ T8231] netlink: del zone limit has 4 unknown bytes [ 141.864627][ T5948] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 141.868754][ T5948] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 141.975767][ T8182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.987271][ T8166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.992363][ T8166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.000226][ T8166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.008619][ T8166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.072438][ T8182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.102102][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.111065][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.120069][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.123096][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.131901][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.134500][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.161313][ T8166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.196635][ T8182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.222473][ T8260] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.277725][ T8182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.298779][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.333252][ T8166] veth0_vlan: entered promiscuous mode [ 142.348373][ T8166] veth1_vlan: entered promiscuous mode [ 142.371635][ T8166] veth0_macvtap: entered promiscuous mode [ 142.381307][ T8166] veth1_macvtap: entered promiscuous mode [ 142.417433][ T46] bridge_slave_1: left allmulticast mode [ 142.419475][ T46] bridge_slave_1: left promiscuous mode [ 142.421371][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.425188][ T46] bridge_slave_0: left allmulticast mode [ 142.427874][ T46] bridge_slave_0: left promiscuous mode [ 142.430076][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.706306][ T8272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 142.708363][ T8272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.711168][ T8272] vhci_hcd vhci_hcd.0: Device attached [ 142.752976][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.757702][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.761735][ T46] bond0 (unregistering): Released all slaves [ 142.794974][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.804625][ T8272] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 142.807532][ T5948] Bluetooth: hci1: command tx timeout [ 142.809825][ T8272] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 142.818228][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.830950][ T8182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.843142][ T8166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.847279][ T8166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.850855][ T8166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.854350][ T8166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.860217][ T8182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.894025][ T8182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.900686][ T8182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.965497][ T6023] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 143.005522][ T61] usb 38-1: SetAddress Request (2) to port 0 [ 143.008037][ T61] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 143.010366][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.012717][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.043546][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.047116][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.068551][ T46] hsr_slave_0: left promiscuous mode [ 143.070953][ T46] hsr_slave_1: left promiscuous mode [ 143.073145][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.075885][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.078865][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.081382][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.116436][ T46] veth1_macvtap: left promiscuous mode [ 143.118758][ T46] veth0_macvtap: left promiscuous mode [ 143.120668][ T46] veth1_vlan: left promiscuous mode [ 143.122509][ T46] veth0_vlan: left promiscuous mode [ 143.149574][ T6023] usb 8-1: not running at top speed; connect to a high speed hub [ 143.154262][ T6023] usb 8-1: config 74 has an invalid interface number: 216 but max is 3 [ 143.157894][ T6023] usb 8-1: config 74 has an invalid interface number: 229 but max is 3 [ 143.161346][ T6023] usb 8-1: config 74 contains an unexpected descriptor of type 0x1, skipping [ 143.164984][ T6023] usb 8-1: config 74 has an invalid descriptor of length 0, skipping remainder of the config [ 143.169533][ T6023] usb 8-1: config 74 has 2 interfaces, different from the descriptor's value: 4 [ 143.173347][ T6023] usb 8-1: config 74 has no interface number 0 [ 143.176141][ T6023] usb 8-1: config 74 has no interface number 1 [ 143.178697][ T6023] usb 8-1: config 74 interface 216 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 143.183129][ T6023] usb 8-1: config 74 interface 229 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 143.188082][ T6023] usb 8-1: config 74 interface 229 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 143.192559][ T6023] usb 8-1: config 74 interface 229 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 143.197866][ T6023] usb 8-1: config 74 interface 229 altsetting 9 has an endpoint descriptor with address 0x19, changing to 0x9 [ 143.202713][ T6023] usb 8-1: config 74 interface 229 altsetting 9 endpoint 0x9 has invalid maxpacket 33314, setting to 64 [ 143.207628][ T6023] usb 8-1: config 74 interface 229 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 143.213042][ T6023] usb 8-1: config 74 interface 216 has no altsetting 0 [ 143.216889][ T6023] usb 8-1: config 74 interface 229 has no altsetting 0 [ 143.222933][ T6023] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=3c.b8 [ 143.227093][ T6023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.229299][ T8273] vhci_hcd: connection reset by peer [ 143.230421][ T6023] usb 8-1: Product: syz [ 143.233051][ T73] vhci_hcd: stop threads [ 143.233810][ T6023] usb 8-1: Manufacturer: ≭砣璋 [ 143.235165][ T73] vhci_hcd: release socket [ 143.237292][ T6023] usb 8-1: SerialNumber: syz [ 143.241036][ T73] vhci_hcd: disconnect device [ 143.718317][ T46] team0 (unregistering): Port device team_slave_1 removed [ 143.849955][ T46] team0 (unregistering): Port device team_slave_0 removed [ 144.159428][ T8291] input: syz1 as /devices/virtual/input/input10 [ 144.517683][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.541700][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.554417][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.557524][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.579803][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.582725][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.644702][ T6023] kvaser_usb 8-1:74.216: error -ENODEV: Cannot get usb endpoint(s) [ 144.663258][ T6023] kvaser_usb 8-1:74.229: error -ENODEV: Cannot get usb endpoint(s) [ 144.678506][ T6023] usb 8-1: USB disconnect, device number 8 [ 144.804914][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.829247][ T8182] veth0_vlan: entered promiscuous mode [ 144.835145][ T8182] veth1_vlan: entered promiscuous mode [ 144.850281][ T8182] veth0_macvtap: entered promiscuous mode [ 144.853906][ T8182] veth1_macvtap: entered promiscuous mode [ 144.872291][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.879693][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.884637][ T8182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.885642][ T5948] Bluetooth: hci1: command tx timeout [ 144.888411][ T8182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.893178][ T8182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.896794][ T8182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.919855][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.965075][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.972543][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.991644][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.994996][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.402817][ T8300] kAFS: unparsable volume name [ 145.406114][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.412199][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.416109][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.421006][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.424803][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.461470][ T8302] lo speed is unknown, defaulting to 1000 [ 145.556572][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.559542][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.587496][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.590320][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.753443][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.757120][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 145.760637][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'. [ 145.827742][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.830537][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.832906][ T8302] bridge_slave_0: entered allmulticast mode [ 145.836337][ T8302] bridge_slave_0: entered promiscuous mode [ 145.839377][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.841668][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.843940][ T8302] bridge_slave_1: entered allmulticast mode [ 145.847167][ T8302] bridge_slave_1: entered promiscuous mode [ 145.916383][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.939073][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.958536][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.017297][ T8302] team0: Port device team_slave_0 added [ 146.022646][ T8302] team0: Port device team_slave_1 added [ 146.054820][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.057224][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.068196][ T8302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.072933][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.075103][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.083507][ T8302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.146597][ T8311] Process accounting resumed [ 146.172682][ T8302] hsr_slave_0: entered promiscuous mode [ 146.177652][ T8302] hsr_slave_1: entered promiscuous mode [ 146.180564][ T8302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.183692][ T8302] Cannot create hsr debugfs directory [ 146.606680][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.677118][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.786571][ T46] bridge_slave_1: left allmulticast mode [ 146.788420][ T46] bridge_slave_1: left promiscuous mode [ 146.790221][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.794752][ T46] bridge_slave_0: left allmulticast mode [ 146.798944][ T46] bridge_slave_0: left promiscuous mode [ 146.800822][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.103125][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.109539][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.114536][ T46] bond0 (unregistering): Released all slaves [ 147.370841][ T5946] Bluetooth: hci2: unexpected cc 0x040d length: 63 > 7 [ 147.373958][ T5946] Bluetooth: hci2: unexpected event for opcode 0x040d [ 147.497151][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.504397][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.510504][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.515545][ T46] hsr_slave_0: left promiscuous mode [ 147.517062][ T5948] Bluetooth: hci0: command tx timeout [ 147.520963][ T46] hsr_slave_1: left promiscuous mode [ 147.523054][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.526762][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.529606][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.532138][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.533559][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.539735][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.565999][ T46] veth1_macvtap: left promiscuous mode [ 147.568035][ T46] veth0_macvtap: left promiscuous mode [ 147.569819][ T46] veth1_vlan: left promiscuous mode [ 147.571523][ T46] veth0_vlan: left promiscuous mode [ 147.910193][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 148.076527][ T61] usb 38-1: device descriptor read/8, error -110 [ 148.541353][ T61] usb usb38-port1: attempt power cycle [ 148.804965][ T46] team0 (unregistering): Port device team_slave_1 removed [ 148.881481][ T46] team0 (unregistering): Port device team_slave_0 removed [ 149.152642][ T61] usb usb38-port1: unable to enumerate USB device [ 149.444961][ T8342] lo speed is unknown, defaulting to 1000 [ 149.568198][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 149.595549][ T5948] Bluetooth: hci1: command tx timeout [ 149.605516][ T5948] Bluetooth: hci0: command tx timeout [ 149.679345][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.682330][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.685275][ T8342] bridge_slave_0: entered allmulticast mode [ 149.703780][ T8342] bridge_slave_0: entered promiscuous mode [ 149.721586][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.724672][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.729067][ T8342] bridge_slave_1: entered allmulticast mode [ 149.732514][ T8342] bridge_slave_1: entered promiscuous mode [ 149.781274][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.787862][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.796689][ T8302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.801733][ T8302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.817212][ T8302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.854349][ T8302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.891322][ T8342] team0: Port device team_slave_0 added [ 149.899136][ T8342] team0: Port device team_slave_1 added [ 149.972067][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.974981][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.985913][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.993183][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.996911][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.010660][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.019311][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 150.022998][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 150.025997][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 150.087654][ T8342] hsr_slave_0: entered promiscuous mode [ 150.090723][ T8342] hsr_slave_1: entered promiscuous mode [ 150.094215][ T8342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.099692][ T8342] Cannot create hsr debugfs directory [ 150.125149][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.337958][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.423137][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.514151][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.540704][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.565822][ T8302] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.592860][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.595712][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.598333][ T8403] overlayfs: upper fs does not support file handles, falling back to index=off. [ 150.611388][ T8403] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 150.618039][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.620818][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.985080][ T46] bridge_slave_1: left allmulticast mode [ 150.996411][ T46] bridge_slave_1: left promiscuous mode [ 150.998617][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.002594][ T46] bridge_slave_0: left allmulticast mode [ 151.004793][ T46] bridge_slave_0: left promiscuous mode [ 151.008348][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.420146][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.425072][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.429484][ T46] bond0 (unregistering): Released all slaves [ 151.436622][ T5948] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 151.439344][ T5948] Bluetooth: hci2: Injecting HCI hardware error event [ 151.442472][ T5948] Bluetooth: hci2: hardware error 0x00 [ 151.675562][ T5946] Bluetooth: hci1: command tx timeout [ 151.677352][ T5946] Bluetooth: hci0: command tx timeout [ 151.732108][ T8424] C: renamed from team_slave_0 (while UP) [ 151.736888][ T8424] netlink: 'syz.0.483': attribute type 3 has an invalid length. [ 151.739426][ T8424] __nla_validate_parse: 3 callbacks suppressed [ 151.739434][ T8424] netlink: 152 bytes leftover after parsing attributes in process `syz.0.483'. [ 151.744705][ T8424] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 151.758179][ T8427] netlink: 'syz.0.483': attribute type 3 has an invalid length. [ 151.760796][ T8427] netlink: 152 bytes leftover after parsing attributes in process `syz.0.483'. [ 151.767044][ T8427] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 151.803750][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.860445][ T46] hsr_slave_0: left promiscuous mode [ 151.862582][ T46] hsr_slave_1: left promiscuous mode [ 151.864845][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.867420][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.885763][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.888143][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.904830][ T46] veth1_macvtap: left promiscuous mode [ 151.906687][ T46] veth0_macvtap: left promiscuous mode [ 151.908462][ T46] veth1_vlan: left promiscuous mode [ 151.915458][ T46] veth0_vlan: left promiscuous mode [ 152.065459][ T24] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 152.208381][ T5805] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 152.208868][ T24] usb 5-1: device descriptor read/64, error -71 [ 152.365420][ T5805] usb 8-1: Using ep0 maxpacket: 8 [ 152.368883][ T5805] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.372798][ T5805] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.375825][ T5805] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 152.380137][ T5805] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 152.383691][ T5805] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 152.387457][ T5805] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.398202][ T5805] hub 8-1:1.0: bad descriptor, ignoring hub [ 152.400770][ T5805] hub 8-1:1.0: probe with driver hub failed with error -5 [ 152.404878][ T5805] cdc_wdm 8-1:1.0: skipping garbage [ 152.406875][ T5805] cdc_wdm 8-1:1.0: skipping garbage [ 152.415135][ T5805] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 152.417312][ T5805] cdc_wdm 8-1:1.0: Unknown control protocol [ 152.455558][ T24] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 152.494313][ T46] team0 (unregistering): Port device team_slave_1 removed [ 152.554005][ T46] team0 (unregistering): Port device team_slave_0 removed [ 152.585505][ T24] usb 5-1: device descriptor read/64, error -71 [ 152.599305][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.605541][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.696731][ T24] usb usb5-port1: attempt power cycle [ 152.938761][ T8436] syz.3.486: attempt to access beyond end of device [ 152.938761][ T8436] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 152.954652][ T8436] XFS (nbd3): SB validate failed with error -5. [ 153.055438][ T24] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 153.085968][ T24] usb 5-1: device descriptor read/8, error -71 [ 153.107713][ T8342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.111894][ T8342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.122886][ T8342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.127714][ T8342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.173497][ T8302] veth0_vlan: entered promiscuous mode [ 153.190733][ T8302] veth1_vlan: entered promiscuous mode [ 153.234336][ T8302] veth0_macvtap: entered promiscuous mode [ 153.246582][ T8302] veth1_macvtap: entered promiscuous mode [ 153.271733][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.275149][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.280193][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.288728][ T8302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.291608][ T8302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.294323][ T8302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.297415][ T8302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.314372][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.323377][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.325719][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.335486][ T24] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 153.340188][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.342612][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.363830][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.367141][ T24] usb 5-1: device descriptor read/8, error -71 [ 153.370049][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.388264][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.390690][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.476341][ T24] usb usb5-port1: unable to enumerate USB device [ 153.515540][ T5948] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 153.528417][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.562354][ T8342] veth0_vlan: entered promiscuous mode [ 153.572311][ T8342] veth1_vlan: entered promiscuous mode [ 153.594727][ T8342] veth0_macvtap: entered promiscuous mode [ 153.598855][ T8342] veth1_macvtap: entered promiscuous mode [ 153.608038][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.615906][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.622548][ T8342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.626613][ T8342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.630269][ T8342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.633898][ T8342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.678035][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.681136][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.693164][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.697312][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.878215][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 155.076123][ T29] usb 8-1: USB disconnect, device number 9 [ 155.084175][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.474543][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.571084][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.690523][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.793279][ T12] bridge_slave_1: left allmulticast mode [ 155.795120][ T12] bridge_slave_1: left promiscuous mode [ 155.797193][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.801068][ T12] bridge_slave_0: left allmulticast mode [ 155.803462][ T12] bridge_slave_0: left promiscuous mode [ 155.805974][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.848003][ T5302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.854857][ T5302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.860817][ T5302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.863671][ T5302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.867467][ T5302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.051364][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.055860][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.061018][ T12] bond0 (unregistering): Released all slaves [ 156.083200][ T8477] lo speed is unknown, defaulting to 1000 [ 156.177995][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 156.267602][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.269995][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.272369][ T8477] bridge_slave_0: entered allmulticast mode [ 156.275029][ T8477] bridge_slave_0: entered promiscuous mode [ 156.278698][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.280982][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.283240][ T8477] bridge_slave_1: entered allmulticast mode [ 156.285927][ T8477] bridge_slave_1: entered promiscuous mode [ 156.322408][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.328905][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.377520][ T8477] team0: Port device team_slave_0 added [ 156.381329][ T8477] team0: Port device team_slave_1 added [ 156.425713][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.428221][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.436659][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.442082][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.444392][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.452975][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.461836][ T12] hsr_slave_0: left promiscuous mode [ 156.464017][ T12] hsr_slave_1: left promiscuous mode [ 156.468985][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.471313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.474079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.477630][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.495109][ T12] veth1_macvtap: left promiscuous mode [ 156.497195][ T12] veth0_macvtap: left promiscuous mode [ 156.498983][ T12] veth1_vlan: left promiscuous mode [ 156.500641][ T12] veth0_vlan: left promiscuous mode [ 157.183479][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.265282][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.359082][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.374855][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.392055][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.396325][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.399181][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.916346][ T5302] Bluetooth: hci0: command tx timeout [ 158.009045][ T8514] syz.3.493: attempt to access beyond end of device [ 158.009045][ T8514] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 158.013078][ T8514] qnx6: unable to read the first superblock [ 158.015471][ T8514] syz.3.493: attempt to access beyond end of device [ 158.015471][ T8514] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 158.019389][ T8514] qnx6: unable to read the first superblock [ 158.021223][ T8514] qnx6: unable to read the first superblock [ 158.112991][ T8505] lo speed is unknown, defaulting to 1000 [ 158.117850][ T8477] hsr_slave_0: entered promiscuous mode [ 158.120240][ T8477] hsr_slave_1: entered promiscuous mode [ 158.122419][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.125265][ T8477] Cannot create hsr debugfs directory [ 158.311650][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 158.413420][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.415848][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.419424][ T8505] bridge_slave_0: entered allmulticast mode [ 158.422066][ T8505] bridge_slave_0: entered promiscuous mode [ 158.427098][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.429297][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.431533][ T8505] bridge_slave_1: entered allmulticast mode [ 158.434080][ T8505] bridge_slave_1: entered promiscuous mode [ 158.481019][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.492629][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.560428][ T8505] team0: Port device team_slave_0 added [ 158.587550][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.596215][ T8505] team0: Port device team_slave_1 added [ 158.680504][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.683403][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.695523][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.722631][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.735755][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.738173][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.748291][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.801350][ T8505] hsr_slave_0: entered promiscuous mode [ 158.803713][ T8505] hsr_slave_1: entered promiscuous mode [ 158.806749][ T8505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.809222][ T8505] Cannot create hsr debugfs directory [ 158.825054][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.893947][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.930917][ T8477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.949842][ T8477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.959115][ T8477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.969583][ T8477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.074918][ T12] bridge_slave_1: left allmulticast mode [ 159.077448][ T12] bridge_slave_1: left promiscuous mode [ 159.079395][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.082992][ T12] bridge_slave_0: left allmulticast mode [ 159.084797][ T12] bridge_slave_0: left promiscuous mode [ 159.088731][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.346626][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.351172][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.358073][ T12] bond0 (unregistering): Released all slaves [ 159.417951][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.445800][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.451365][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.453568][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.470398][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.472642][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.487899][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 159.491131][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'. [ 159.515840][ T5302] Bluetooth: hci1: command tx timeout [ 159.531240][ T8572] lo speed is unknown, defaulting to 1000 [ 159.678415][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.712669][ T12] hsr_slave_0: left promiscuous mode [ 159.714810][ T12] hsr_slave_1: left promiscuous mode [ 159.718504][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.720987][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.723938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.727045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.751033][ T12] veth1_macvtap: left promiscuous mode [ 159.752798][ T12] veth0_macvtap: left promiscuous mode [ 159.754558][ T12] veth1_vlan: left promiscuous mode [ 159.756791][ T12] veth0_vlan: left promiscuous mode [ 159.789507][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 160.005505][ T5302] Bluetooth: hci0: command tx timeout [ 160.413867][ T12] team0 (unregistering): Port device team_slave_1 removed [ 160.486289][ T12] team0 (unregistering): Port device team_slave_0 removed [ 161.102379][ T8477] veth0_vlan: entered promiscuous mode [ 161.128016][ T8477] veth1_vlan: entered promiscuous mode [ 161.209267][ T8477] veth0_macvtap: entered promiscuous mode [ 161.256905][ T8477] veth1_macvtap: entered promiscuous mode [ 161.293077][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.299644][ T8505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.309541][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.312811][ T8505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.330373][ T8505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.340639][ T8477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.343549][ T8477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.347774][ T8477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.350495][ T8477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.354570][ T8505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.395507][ T8613] FAULT_INJECTION: forcing a failure. [ 161.395507][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 161.399386][ T8613] CPU: 0 UID: 0 PID: 8613 Comm: syz.0.501 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 161.399401][ T8613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.399408][ T8613] Call Trace: [ 161.399412][ T8613] [ 161.399416][ T8613] dump_stack_lvl+0x16c/0x1f0 [ 161.399435][ T8613] should_fail_ex+0x512/0x640 [ 161.399450][ T8613] ? fs_reclaim_acquire+0xae/0x150 [ 161.399464][ T8613] ? tomoyo_encode2+0x100/0x3e0 [ 161.399477][ T8613] should_failslab+0xc2/0x120 [ 161.399487][ T8613] __kmalloc_noprof+0xd2/0x510 [ 161.399502][ T8613] ? d_absolute_path+0x136/0x1a0 [ 161.399515][ T8613] tomoyo_encode2+0x100/0x3e0 [ 161.399530][ T8613] tomoyo_encode+0x29/0x50 [ 161.399542][ T8613] tomoyo_realpath_from_path+0x18f/0x6e0 [ 161.399560][ T8613] tomoyo_path_number_perm+0x245/0x580 [ 161.399571][ T8613] ? tomoyo_path_number_perm+0x237/0x580 [ 161.399584][ T8613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.399609][ T8613] ? find_held_lock+0x2b/0x80 [ 161.399619][ T8613] ? hook_file_ioctl_common+0x145/0x410 [ 161.399633][ T8613] ? __fget_files+0x20e/0x3c0 [ 161.399646][ T8613] ? __fput_deferred+0x420/0x480 [ 161.399658][ T8613] security_file_ioctl_compat+0x9b/0x240 [ 161.399673][ T8613] __ia32_compat_sys_ioctl+0xc3/0x370 [ 161.399687][ T8613] __do_fast_syscall_32+0x7c/0x3a0 [ 161.399704][ T8613] do_fast_syscall_32+0x32/0x80 [ 161.399719][ T8613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.399733][ T8613] RIP: 0023:0xf70de579 [ 161.399742][ T8613] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.399752][ T8613] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 161.399761][ T8613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000542f [ 161.399768][ T8613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.399773][ T8613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.399779][ T8613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.399785][ T8613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.399798][ T8613] [ 161.399807][ T8613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.549562][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.601234][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.602392][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.603825][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.605465][ T5302] Bluetooth: hci1: command tx timeout [ 161.642953][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.645251][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.653254][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.655775][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.660885][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.663326][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.797833][ T8622] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 161.843376][ T8622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.894862][ T8627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.899189][ T8627] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.906468][ T8627] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 161.972472][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.993643][ T8505] veth0_vlan: entered promiscuous mode [ 161.998736][ T8505] veth1_vlan: entered promiscuous mode [ 162.067619][ T8505] veth0_macvtap: entered promiscuous mode [ 162.072384][ T8505] veth1_macvtap: entered promiscuous mode [ 162.083476][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.097597][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.103163][ T8505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.124238][ T8505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.127212][ T8505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.130945][ T8505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.165226][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.208195][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.211121][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.222530][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.225040][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.843028][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.023344][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.027060][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.030195][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.032927][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.035543][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.059188][ T8648] lo speed is unknown, defaulting to 1000 [ 163.173592][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 163.175388][ T40] kauditd_printk_skb: 259 callbacks suppressed [ 163.175398][ T40] audit: type=1326 audit(1751216250.872:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.185503][ T40] audit: type=1326 audit(1751216250.872:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.192636][ T40] audit: type=1326 audit(1751216250.882:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.204061][ T40] audit: type=1326 audit(1751216250.882:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.215524][ T40] audit: type=1326 audit(1751216250.882:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.223292][ T40] audit: type=1326 audit(1751216250.912:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.230090][ T40] audit: type=1326 audit(1751216250.912:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.236966][ T40] audit: type=1326 audit(1751216250.912:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.243596][ T40] audit: type=1326 audit(1751216250.922:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=197 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.250490][ T40] audit: type=1326 audit(1751216250.922:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 163.290610][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.293023][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.295560][ T8648] bridge_slave_0: entered allmulticast mode [ 163.298312][ T8648] bridge_slave_0: entered promiscuous mode [ 163.301494][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.303794][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.308531][ T8648] bridge_slave_1: entered allmulticast mode [ 163.311180][ T8648] bridge_slave_1: entered promiscuous mode [ 163.348426][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.352938][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.395281][ T8648] team0: Port device team_slave_0 added [ 163.400875][ T8648] team0: Port device team_slave_1 added [ 163.414125][ T8659] FAULT_INJECTION: forcing a failure. [ 163.414125][ T8659] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.420957][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.3.510 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 163.420980][ T8659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.420991][ T8659] Call Trace: [ 163.420997][ T8659] [ 163.421003][ T8659] dump_stack_lvl+0x16c/0x1f0 [ 163.421033][ T8659] should_fail_ex+0x512/0x640 [ 163.421059][ T8659] _copy_to_user+0x32/0xd0 [ 163.421086][ T8659] simple_read_from_buffer+0xcb/0x170 [ 163.421117][ T8659] proc_fail_nth_read+0x197/0x270 [ 163.421136][ T8659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.421158][ T8659] ? rw_verify_area+0xcf/0x680 [ 163.421179][ T8659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.421197][ T8659] vfs_read+0x1e1/0xc60 [ 163.421219][ T8659] ? fdget_pos+0x2a2/0x370 [ 163.421244][ T8659] ? __pfx_vfs_read+0x10/0x10 [ 163.421262][ T8659] ? find_held_lock+0x2b/0x80 [ 163.421287][ T8659] ? __fget_files+0x20e/0x3c0 [ 163.421316][ T8659] ksys_read+0x12a/0x250 [ 163.421337][ T8659] ? __pfx_ksys_read+0x10/0x10 [ 163.421359][ T8659] ? rcu_is_watching+0x12/0xc0 [ 163.421379][ T8659] __do_fast_syscall_32+0x7c/0x3a0 [ 163.421406][ T8659] do_fast_syscall_32+0x32/0x80 [ 163.421430][ T8659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.421451][ T8659] RIP: 0023:0xf711e579 [ 163.421463][ T8659] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.421478][ T8659] RSP: 002b:00000000f510e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 163.421493][ T8659] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510e620 [ 163.421504][ T8659] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 163.421513][ T8659] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 163.421522][ T8659] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 163.421532][ T8659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.421552][ T8659] [ 163.512763][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.520085][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.522230][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.531526][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.537018][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.539249][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.548190][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.591275][ T8648] hsr_slave_0: entered promiscuous mode [ 163.593551][ T8648] hsr_slave_1: entered promiscuous mode [ 163.595974][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.598331][ T8648] Cannot create hsr debugfs directory [ 163.779087][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.872817][ T12] bridge_slave_1: left allmulticast mode [ 163.875408][ T12] bridge_slave_1: left promiscuous mode [ 163.877327][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.881564][ T12] bridge_slave_0: left allmulticast mode [ 163.883340][ T12] bridge_slave_0: left promiscuous mode [ 163.885192][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.116750][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.120840][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.124390][ T12] bond0 (unregistering): Released all slaves [ 164.559133][ T12] hsr_slave_0: left promiscuous mode [ 164.564204][ T12] hsr_slave_1: left promiscuous mode [ 164.568191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.570589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.573422][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.576171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.595085][ T12] veth1_macvtap: left promiscuous mode [ 164.596891][ T12] veth0_macvtap: left promiscuous mode [ 164.598671][ T12] veth1_vlan: left promiscuous mode [ 164.600330][ T12] veth0_vlan: left promiscuous mode [ 165.117125][ T5948] Bluetooth: hci0: command tx timeout [ 165.254039][ T12] team0 (unregistering): Port device team_slave_1 removed [ 165.320805][ T12] team0 (unregistering): Port device team_slave_0 removed [ 165.647927][ T8704] Bluetooth: MGMT ver 1.23 [ 165.779983][ T5302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.784613][ T5302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.796733][ T5302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.817041][ T5302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.829539][ T5302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.974289][ T8705] lo speed is unknown, defaulting to 1000 [ 166.025272][ T8648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.115516][ T8648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.143347][ T8648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.152492][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 166.157747][ T8648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.291884][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.294213][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.299160][ T8705] bridge_slave_0: entered allmulticast mode [ 166.301853][ T8705] bridge_slave_0: entered promiscuous mode [ 166.314687][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.330220][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.333352][ T8705] bridge_slave_1: entered allmulticast mode [ 166.348081][ T8705] bridge_slave_1: entered promiscuous mode [ 166.399783][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.408367][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.461320][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.469543][ T8705] team0: Port device team_slave_0 added [ 166.475199][ T8705] team0: Port device team_slave_1 added [ 166.508342][ T8735] lo speed is unknown, defaulting to 1000 [ 166.519531][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.537304][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.539870][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.556641][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.582567][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.585491][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.593892][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.634597][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.643636][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.646473][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.663831][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.666462][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.712424][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.741538][ T8705] hsr_slave_0: entered promiscuous mode [ 166.743903][ T8705] hsr_slave_1: entered promiscuous mode [ 166.746684][ T8705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.749309][ T8705] Cannot create hsr debugfs directory [ 166.787579][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.867069][ T838] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 166.892585][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.013259][ T12] bridge_slave_1: left allmulticast mode [ 167.018101][ T12] bridge_slave_1: left promiscuous mode [ 167.020041][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.024984][ T12] bridge_slave_0: left allmulticast mode [ 167.027399][ T12] bridge_slave_0: left promiscuous mode [ 167.029774][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.031194][ T8752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 167.034642][ T8752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.037496][ T8752] vhci_hcd vhci_hcd.0: Device attached [ 167.042585][ T838] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 16 [ 167.046201][ T838] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1023 [ 167.049503][ T838] usb 8-1: config 1 interface 0 has no altsetting 0 [ 167.053181][ T838] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.056324][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.058957][ T838] usb 8-1: Product: syz [ 167.060310][ T838] usb 8-1: Manufacturer: syz [ 167.061812][ T838] usb 8-1: SerialNumber: syz [ 167.065254][ T8743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.069538][ T8743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.195638][ T5302] Bluetooth: hci0: command tx timeout [ 167.275570][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 167.279163][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.282372][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.306606][ T838] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 167.317806][ T838] usb 8-1: USB disconnect, device number 10 [ 167.342057][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.350246][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.355805][ T12] bond0 (unregistering): Released all slaves [ 167.390508][ T8753] vhci_hcd: connection reset by peer [ 167.393171][ T13] vhci_hcd: stop threads [ 167.394681][ T13] vhci_hcd: release socket [ 167.402229][ T13] vhci_hcd: disconnect device [ 167.408096][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.449428][ T8648] veth0_vlan: entered promiscuous mode [ 167.459506][ T8648] veth1_vlan: entered promiscuous mode [ 167.522867][ T8648] veth0_macvtap: entered promiscuous mode [ 167.527643][ T8648] veth1_macvtap: entered promiscuous mode [ 167.536020][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.543861][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.550948][ T8648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.554514][ T8648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.559106][ T8648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.562510][ T8648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.690904][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.693426][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.726797][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.730174][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.785387][ T12] hsr_slave_0: left promiscuous mode [ 167.791755][ T12] hsr_slave_1: left promiscuous mode [ 167.794885][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.798393][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.802715][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.806342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.844224][ T12] veth1_macvtap: left promiscuous mode [ 167.846585][ T12] veth0_macvtap: left promiscuous mode [ 167.848436][ T12] veth1_vlan: left promiscuous mode [ 167.850318][ T12] veth0_vlan: left promiscuous mode [ 167.879431][ T8771] fuse: Unknown parameter 'f' [ 167.915689][ T5302] Bluetooth: hci1: command tx timeout [ 168.094130][ T8776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.118335][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 168.595024][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.669354][ T12] team0 (unregistering): Port device team_slave_0 removed [ 169.254870][ T8776] hsr_slave_0: left promiscuous mode [ 169.262022][ T8776] hsr_slave_1: left promiscuous mode [ 169.371389][ T8705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.377863][ T8705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.382272][ T8705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.386919][ T8705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.469407][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.491891][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.508100][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.511282][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.536936][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.540052][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.752670][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.812901][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.836462][ T8705] veth0_vlan: entered promiscuous mode [ 169.841920][ T8705] veth1_vlan: entered promiscuous mode [ 169.864479][ T8705] veth0_macvtap: entered promiscuous mode [ 169.871270][ T8705] veth1_macvtap: entered promiscuous mode [ 169.886832][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.895888][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.902480][ T8705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.906210][ T8705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.909840][ T8705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.913432][ T8705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.964731][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.969722][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.984078][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.990050][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.999319][ T5302] Bluetooth: hci1: command tx timeout [ 170.444908][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.535131][ T8813] batman_adv: batadv0: Adding interface: dummy0 [ 170.538069][ T8813] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.548480][ T8813] batman_adv: batadv0: Interface activated: dummy0 [ 170.558893][ T8813] batadv0: mtu less than device minimum [ 170.561466][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.565867][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.569630][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.572987][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.576400][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.580133][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.583827][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.587304][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.591550][ T8813] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.686968][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.694379][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.700338][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.707543][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.711243][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.735021][ T8817] lo speed is unknown, defaulting to 1000 [ 170.875431][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 170.981916][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.982874][ T8829] random: crng reseeded on system resumption [ 170.995741][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.999254][ T8817] bridge_slave_0: entered allmulticast mode [ 171.006855][ T8817] bridge_slave_0: entered promiscuous mode [ 171.023518][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.026687][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.030714][ T8817] bridge_slave_1: entered allmulticast mode [ 171.034863][ T8817] bridge_slave_1: entered promiscuous mode [ 171.047290][ T8829] Restarting kernel threads ... [ 171.051040][ T8829] Done restarting kernel threads. [ 171.161727][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.168716][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.243008][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.258578][ T8817] team0: Port device team_slave_0 added [ 171.262552][ T8817] team0: Port device team_slave_1 added [ 171.575704][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.578709][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.588106][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.616668][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.628574][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.630827][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.640133][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.707056][ T8817] hsr_slave_0: entered promiscuous mode [ 171.710082][ T8817] hsr_slave_1: entered promiscuous mode [ 171.712834][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.716847][ T8817] Cannot create hsr debugfs directory [ 171.851723][ T12] bridge_slave_1: left allmulticast mode [ 171.854198][ T12] bridge_slave_1: left promiscuous mode [ 171.858495][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.862363][ T12] bridge_slave_0: left allmulticast mode [ 171.864194][ T12] bridge_slave_0: left promiscuous mode [ 171.869323][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.237971][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.243520][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.248278][ T12] bond0 (unregistering): Released all slaves [ 172.405511][ T10] vhci_hcd: vhci_device speed not set [ 172.677851][ T12] hsr_slave_0: left promiscuous mode [ 172.680968][ T12] hsr_slave_1: left promiscuous mode [ 172.684148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.687479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.691667][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.694694][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.728021][ T12] veth1_macvtap: left promiscuous mode [ 172.730400][ T12] veth0_macvtap: left promiscuous mode [ 172.732746][ T12] veth1_vlan: left promiscuous mode [ 172.735008][ T12] veth0_vlan: left promiscuous mode [ 172.795512][ T5948] Bluetooth: hci0: command tx timeout [ 173.401857][ T12] team0 (unregistering): Port device team_slave_1 removed [ 173.484275][ T12] team0 (unregistering): Port device team_slave_0 removed [ 173.693983][ T8855] Mount JFS Failure: -22 [ 173.702109][ T8855] jfs_mount failed w/return code = -22 [ 173.705012][ T5302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.710798][ T5302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.715212][ T5302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.724002][ T5302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.736055][ T5302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.053889][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 174.263859][ T8856] lo speed is unknown, defaulting to 1000 [ 174.393713][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 174.487103][ T8817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.501101][ T8817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.516010][ T8817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.554288][ T8817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.599527][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.601846][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.604249][ T8856] bridge_slave_0: entered allmulticast mode [ 174.609181][ T8856] bridge_slave_0: entered promiscuous mode [ 174.612629][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.614932][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.618056][ T8856] bridge_slave_1: entered allmulticast mode [ 174.623136][ T8856] bridge_slave_1: entered promiscuous mode [ 174.630305][ T8892] netlink: 80 bytes leftover after parsing attributes in process `syz.3.546'. [ 174.634904][ T8892] netlink: 80 bytes leftover after parsing attributes in process `syz.3.546'. [ 174.696698][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.705652][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.812854][ T8856] team0: Port device team_slave_0 added [ 174.817763][ T8856] team0: Port device team_slave_1 added [ 174.889248][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'. [ 174.892391][ T5302] Bluetooth: hci0: command tx timeout [ 174.903209][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.907890][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.916585][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.088344][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.090522][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.103933][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.222910][ T8856] hsr_slave_0: entered promiscuous mode [ 175.225182][ T8856] hsr_slave_1: entered promiscuous mode [ 175.230435][ T8856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.232860][ T8856] Cannot create hsr debugfs directory [ 175.250049][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.283584][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.307581][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.346060][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.348754][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.378938][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.452553][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.455906][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.563724][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.660991][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.835889][ T5302] Bluetooth: hci1: command tx timeout [ 176.034646][ T12] bridge_slave_1: left allmulticast mode [ 176.037857][ T12] bridge_slave_1: left promiscuous mode [ 176.040492][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.048326][ T12] bridge_slave_0: left allmulticast mode [ 176.051093][ T12] bridge_slave_0: left promiscuous mode [ 176.053837][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.069812][ T8934] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 176.388017][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.394048][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.400298][ T12] bond0 (unregistering): Released all slaves [ 176.762587][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.818760][ T8817] veth0_vlan: entered promiscuous mode [ 176.883963][ T12] hsr_slave_0: left promiscuous mode [ 176.887340][ T12] hsr_slave_1: left promiscuous mode [ 176.896126][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.899175][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.902479][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.905050][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.939624][ T12] veth1_macvtap: left promiscuous mode [ 176.941562][ T12] veth0_macvtap: left promiscuous mode [ 176.943477][ T12] veth1_vlan: left promiscuous mode [ 176.945507][ T12] veth0_vlan: left promiscuous mode [ 176.955513][ T5302] Bluetooth: hci0: command tx timeout [ 177.464344][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 177.464356][ T40] audit: type=1326 audit(1751216265.162:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.3.557" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 177.661019][ T12] team0 (unregistering): Port device team_slave_1 removed [ 177.753887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.925522][ T5302] Bluetooth: hci1: command tx timeout [ 178.480501][ T8817] veth1_vlan: entered promiscuous mode [ 178.489667][ T8856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.514313][ T8856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.679993][ T8856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.688813][ T8856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.732738][ T8817] veth0_macvtap: entered promiscuous mode [ 178.745040][ T8817] veth1_macvtap: entered promiscuous mode [ 178.780750][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.798240][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.817634][ T8817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.821306][ T8817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.825002][ T8817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.832724][ T8817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.936359][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.939106][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.978659][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.996501][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.999080][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.013195][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.020955][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.023267][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.033711][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.036234][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.036534][ T5302] Bluetooth: hci0: command tx timeout [ 179.208681][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.243386][ T8856] veth0_vlan: entered promiscuous mode [ 179.252981][ T8856] veth1_vlan: entered promiscuous mode [ 179.299537][ T8856] veth0_macvtap: entered promiscuous mode [ 179.310135][ T8856] veth1_macvtap: entered promiscuous mode [ 179.322192][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.329573][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.334969][ T8856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.338310][ T8856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.341750][ T8856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.346217][ T8856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.400255][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.404793][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.428887][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.431360][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.860656][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 179.914142][ T9023] fuse: Bad value for 'fd' [ 180.148059][ T9031] netlink: 'syz.0.566': attribute type 27 has an invalid length. [ 180.343645][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 180.439754][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.645474][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 180.809692][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 180.813694][ T10] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.823440][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 180.832412][ T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.40 [ 180.836578][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.840011][ T10] usb 5-1: Manufacturer: Ё [ 180.857974][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.123251][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.202081][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.270284][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 181.272756][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 181.278304][ T10] usb 5-1: USB disconnect, device number 22 [ 181.335865][ T12] bridge_slave_1: left allmulticast mode [ 181.338353][ T12] bridge_slave_1: left promiscuous mode [ 181.340970][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.348672][ T12] bridge_slave_0: left allmulticast mode [ 181.350507][ T12] bridge_slave_0: left promiscuous mode [ 181.352772][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.686047][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.691266][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.695554][ T12] bond0 (unregistering): Released all slaves [ 181.713020][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.718818][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.722404][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.727203][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.747114][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.789036][ T9048] lo speed is unknown, defaulting to 1000 [ 181.974503][ T9048] chnl_net:caif_netlink_parms(): no params data found [ 182.077353][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.079740][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.082046][ T9048] bridge_slave_0: entered allmulticast mode [ 182.086476][ T9048] bridge_slave_0: entered promiscuous mode [ 182.089694][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.091962][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.094276][ T9048] bridge_slave_1: entered allmulticast mode [ 182.097837][ T9048] bridge_slave_1: entered promiscuous mode [ 182.147177][ T12] hsr_slave_0: left promiscuous mode [ 182.150172][ T12] hsr_slave_1: left promiscuous mode [ 182.152590][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.155863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.159838][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.162975][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.184312][ T12] veth1_macvtap: left promiscuous mode [ 182.186689][ T12] veth0_macvtap: left promiscuous mode [ 182.189212][ T12] veth1_vlan: left promiscuous mode [ 182.191719][ T12] veth0_vlan: left promiscuous mode [ 182.924479][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.997405][ T12] team0 (unregistering): Port device team_slave_0 removed [ 183.480508][ T5302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.491446][ T5302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.494863][ T5302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.503426][ T5302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.514784][ T5302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.580904][ T9048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.588601][ T9048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.592927][ T9064] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 183.694467][ T9048] team0: Port device team_slave_0 added [ 183.702977][ T9048] team0: Port device team_slave_1 added [ 183.800854][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.803789][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.822864][ T9048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.834520][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.837560][ T5302] Bluetooth: hci0: command tx timeout [ 183.843288][ T9094] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 183.846689][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.859455][ T9048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.863528][ T9071] lo speed is unknown, defaulting to 1000 [ 183.882420][ T9094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.888453][ T9097] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.574'. [ 183.966124][ T9092] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.074868][ T9048] hsr_slave_0: entered promiscuous mode [ 184.084870][ T9048] hsr_slave_1: entered promiscuous mode [ 184.087522][ T9048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.093268][ T9048] Cannot create hsr debugfs directory [ 184.496911][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.631026][ T9071] chnl_net:caif_netlink_parms(): no params data found [ 184.719577][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.891931][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.090193][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.320800][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.323249][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.327723][ T9071] bridge_slave_0: entered allmulticast mode [ 185.332555][ T9071] bridge_slave_0: entered promiscuous mode [ 185.338031][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.340281][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.342463][ T9071] bridge_slave_1: entered allmulticast mode [ 185.345573][ T9071] bridge_slave_1: entered promiscuous mode [ 185.428608][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.460065][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.532285][ T9071] team0: Port device team_slave_0 added [ 185.551295][ T9071] team0: Port device team_slave_1 added [ 185.605498][ T5302] Bluetooth: hci1: command tx timeout [ 185.833272][ T12] bridge_slave_1: left allmulticast mode [ 185.837612][ T12] bridge_slave_1: left promiscuous mode [ 185.840538][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.852156][ T12] bridge_slave_0: left allmulticast mode [ 185.854478][ T12] bridge_slave_0: left promiscuous mode [ 185.867259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.915805][ T5302] Bluetooth: hci0: command tx timeout [ 186.172346][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 186.227239][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.232936][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.237710][ T12] bond0 (unregistering): Released all slaves [ 186.247783][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.250442][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.259325][ T9071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.332650][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.337110][ T9136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.338199][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.340672][ T9136] IPv6: NLM_F_CREATE should be set when creating new route [ 186.352411][ T9071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.353908][ T9136] IPv6: NLM_F_CREATE should be set when creating new route [ 186.366619][ T9136] ------------[ cut here ]------------ [ 186.368816][ T9136] WARNING: CPU: 1 PID: 9136 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb9d/0x10d0 [ 186.372665][ T9136] Modules linked in: [ 186.374569][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.3.583 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 186.381180][ T9136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.385015][ T9136] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 186.386933][ T9136] Code: 24 20 48 8b 6c 24 38 e8 d1 cc 9d fa e8 cc cc 9d fa 89 de 44 89 ef e8 42 c7 9d fa 41 39 dd 0f 84 cb fd ff ff e8 b4 cc 9d fa 90 <0f> 0b 90 e9 bd fd ff ff e8 a6 cc 9d fa 48 8d 7d 38 be 01 00 00 00 [ 186.393004][ T9136] RSP: 0018:ffffc9000305f038 EFLAGS: 00010246 [ 186.395479][ T9136] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffc90007951000 [ 186.398585][ T9136] RDX: 0000000000080000 RSI: ffffffff871dc01c RDI: 0000000000000004 [ 186.401575][ T9136] RBP: ffff88806b7e3000 R08: 0000000000000004 R09: 0000000000000002 [ 186.404665][ T9136] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000305f190 [ 186.407821][ T9136] R13: 0000000000000002 R14: ffff8880212ae780 R15: ffff88806011c000 [ 186.411296][ T9136] FS: 0000000000000000(0000) GS:ffff88809765f000(0063) knlGS:00000000f510eb40 [ 186.414933][ T9136] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 186.418070][ T9136] CR2: 000000000c3c204b CR3: 000000005dad4000 CR4: 0000000000352ef0 [ 186.421248][ T9136] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 186.424251][ T9136] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.427386][ T9136] Call Trace: [ 186.428735][ T9136] [ 186.430035][ T9136] notifier_call_chain+0xb9/0x410 [ 186.432305][ T9136] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 186.434586][ T9136] atomic_notifier_call_chain+0x71/0x1c0 [ 186.436558][ T9136] call_fib_notifiers+0x33/0x70 [ 186.437961][ T9136] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 186.439828][ T9136] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 186.442214][ T9136] ? find_held_lock+0x2b/0x80 [ 186.444010][ T9136] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 186.446247][ T9136] ip6_route_multipath_add+0xb4f/0x1bd0 [ 186.448393][ T9136] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 186.450479][ T9136] ? kmem_cache_free+0x2d1/0x4d0 [ 186.452265][ T9136] ? kfree_skbmem+0x1a4/0x1f0 [ 186.454283][ T9136] ? inet6_rtm_newroute+0xe4/0x1a0 [ 186.456613][ T9136] inet6_rtm_newroute+0xe4/0x1a0 [ 186.458949][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.461116][ T9136] ? __lock_acquire+0x622/0x1c90 [ 186.462985][ T9136] ? find_held_lock+0x2b/0x80 [ 186.465126][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.467307][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.469498][ T9136] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 186.471489][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.473626][ T9136] rtnetlink_rcv_msg+0x95b/0xe90 [ 186.475724][ T9136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.477827][ T9136] ? ref_tracker_free+0x37c/0x830 [ 186.479933][ T9136] netlink_rcv_skb+0x155/0x420 [ 186.482084][ T9136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.484627][ T9136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.486647][ T9136] ? netlink_deliver_tap+0x1ae/0xd30 [ 186.488368][ T9136] netlink_unicast+0x53d/0x7f0 [ 186.490209][ T9136] ? __pfx_netlink_unicast+0x10/0x10 [ 186.492240][ T9136] netlink_sendmsg+0x8d1/0xdd0 [ 186.493849][ T9136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.495667][ T9136] ? __import_iovec+0x1dd/0x650 [ 186.497297][ T9136] ____sys_sendmsg+0xa98/0xc70 [ 186.499179][ T9136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.501429][ T9136] ? get_compat_msghdr+0x11a/0x170 [ 186.503751][ T9136] ? futex_unqueue+0x133/0x2c0 [ 186.505871][ T9136] ___sys_sendmsg+0x134/0x1d0 [ 186.507869][ T9136] ? futex_unqueue+0x13d/0x2c0 [ 186.509836][ T9136] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.512141][ T9136] ? __lock_acquire+0x622/0x1c90 [ 186.514127][ T9136] __sys_sendmmsg+0x2f9/0x420 [ 186.516399][ T9136] ? __pfx___sys_sendmmsg+0x10/0x10 [ 186.518355][ T9136] ? __pfx_do_futex+0x10/0x10 [ 186.520752][ T9136] ? xfd_validate_state+0x61/0x180 [ 186.523720][ T9136] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 186.526634][ T9136] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 186.529162][ T9136] __do_fast_syscall_32+0x7c/0x3a0 [ 186.531050][ T9136] do_fast_syscall_32+0x32/0x80 [ 186.532962][ T9136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.535231][ T9136] RIP: 0023:0xf711e579 [ 186.536553][ T9136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 186.542116][ T9136] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 186.544674][ T9136] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 186.547027][ T9136] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 186.550176][ T9136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.553448][ T9136] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 186.556162][ T9136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.558517][ T9136] [ 186.559437][ T9136] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.561434][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.3.583 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 186.564754][ T9136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.567966][ T9136] Call Trace: [ 186.569274][ T9136] [ 186.570336][ T9136] dump_stack_lvl+0x3d/0x1f0 [ 186.571911][ T9136] panic+0x71c/0x800 [ 186.573239][ T9136] ? __pfx_panic+0x10/0x10 [ 186.574749][ T9136] ? show_trace_log_lvl+0x29b/0x3e0 [ 186.576282][ T9136] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 186.578021][ T9136] check_panic_on_warn+0xab/0xb0 [ 186.579420][ T9136] __warn+0xf6/0x3c0 [ 186.580541][ T9136] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 186.582034][ T9136] report_bug+0x3c3/0x580 [ 186.583463][ T9136] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 186.585001][ T9136] handle_bug+0x184/0x210 [ 186.586211][ T9136] exc_invalid_op+0x17/0x50 [ 186.587633][ T9136] asm_exc_invalid_op+0x1a/0x20 [ 186.589571][ T9136] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 186.591860][ T9136] Code: 24 20 48 8b 6c 24 38 e8 d1 cc 9d fa e8 cc cc 9d fa 89 de 44 89 ef e8 42 c7 9d fa 41 39 dd 0f 84 cb fd ff ff e8 b4 cc 9d fa 90 <0f> 0b 90 e9 bd fd ff ff e8 a6 cc 9d fa 48 8d 7d 38 be 01 00 00 00 [ 186.598714][ T9136] RSP: 0018:ffffc9000305f038 EFLAGS: 00010246 [ 186.601018][ T9136] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffc90007951000 [ 186.604068][ T9136] RDX: 0000000000080000 RSI: ffffffff871dc01c RDI: 0000000000000004 [ 186.607352][ T9136] RBP: ffff88806b7e3000 R08: 0000000000000004 R09: 0000000000000002 [ 186.610420][ T9136] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000305f190 [ 186.613371][ T9136] R13: 0000000000000002 R14: ffff8880212ae780 R15: ffff88806011c000 [ 186.616336][ T9136] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 186.618259][ T9136] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 186.620141][ T9136] notifier_call_chain+0xb9/0x410 [ 186.622044][ T9136] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 186.624652][ T9136] atomic_notifier_call_chain+0x71/0x1c0 [ 186.626803][ T9136] call_fib_notifiers+0x33/0x70 [ 186.628309][ T9136] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 186.630395][ T9136] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 186.633037][ T9136] ? find_held_lock+0x2b/0x80 [ 186.634784][ T9136] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 186.636925][ T9136] ip6_route_multipath_add+0xb4f/0x1bd0 [ 186.639025][ T9136] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 186.641244][ T9136] ? kmem_cache_free+0x2d1/0x4d0 [ 186.643145][ T9136] ? kfree_skbmem+0x1a4/0x1f0 [ 186.644978][ T9136] ? inet6_rtm_newroute+0xe4/0x1a0 [ 186.646962][ T9136] inet6_rtm_newroute+0xe4/0x1a0 [ 186.648950][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.651166][ T9136] ? __lock_acquire+0x622/0x1c90 [ 186.653142][ T9136] ? find_held_lock+0x2b/0x80 [ 186.654934][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.657008][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.659181][ T9136] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 186.661134][ T9136] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 186.663304][ T9136] rtnetlink_rcv_msg+0x95b/0xe90 [ 186.665309][ T9136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.667523][ T9136] ? ref_tracker_free+0x37c/0x830 [ 186.669516][ T9136] netlink_rcv_skb+0x155/0x420 [ 186.671406][ T9136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.673447][ T9136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.675491][ T9136] ? netlink_deliver_tap+0x1ae/0xd30 [ 186.677498][ T9136] netlink_unicast+0x53d/0x7f0 [ 186.679357][ T9136] ? __pfx_netlink_unicast+0x10/0x10 [ 186.681338][ T9136] netlink_sendmsg+0x8d1/0xdd0 [ 186.683186][ T9136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.685277][ T9136] ? __import_iovec+0x1dd/0x650 [ 186.687226][ T9136] ____sys_sendmsg+0xa98/0xc70 [ 186.689109][ T9136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.691143][ T9136] ? get_compat_msghdr+0x11a/0x170 [ 186.693187][ T9136] ? futex_unqueue+0x133/0x2c0 [ 186.695031][ T9136] ___sys_sendmsg+0x134/0x1d0 [ 186.696849][ T9136] ? futex_unqueue+0x13d/0x2c0 [ 186.698629][ T9136] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.700610][ T9136] ? __lock_acquire+0x622/0x1c90 [ 186.702580][ T9136] __sys_sendmmsg+0x2f9/0x420 [ 186.704428][ T9136] ? __pfx___sys_sendmmsg+0x10/0x10 [ 186.706490][ T9136] ? __pfx_do_futex+0x10/0x10 [ 186.708117][ T9136] ? xfd_validate_state+0x61/0x180 [ 186.709864][ T9136] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 186.711987][ T9136] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 186.714477][ T9136] __do_fast_syscall_32+0x7c/0x3a0 [ 186.716491][ T9136] do_fast_syscall_32+0x32/0x80 [ 186.718438][ T9136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.720812][ T9136] RIP: 0023:0xf711e579 [ 186.722401][ T9136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 186.729240][ T9136] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 186.732496][ T9136] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 186.735548][ T9136] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 186.738694][ T9136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.742154][ T9136] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 186.745676][ T9136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.748837][ T9136] [ 186.750731][ T9136] Kernel Offset: disabled [ 186.752437][ T9136] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:57:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff8b4a3d08 RDX=ffff88802064a440 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000299 RSP=ffffc900007afb20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81bb8661 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809755f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000004ce3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7483ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85587475 RDI=ffffffff9b06da00 RBP=ffffffff9b06d9c0 RSP=ffffc9000305e9a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b06d9c0 R15=ffffffff85587410 RIP=ffffffff8558749f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809765f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3c204b CR3=000000005dad4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002b6fff RBX=0000000000000002 RCX=ffffffff8b7cfc29 RDX=0000000000000000 RSI=ffffffff8de13e03 RDI=ffffffff8c1566a0 RBP=ffffed1003bde910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801def4880 R14=ffffffff90a82850 R15=0000000000000000 RIP=ffffffff8b7ce78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809775f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000028fae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dc1da0bc50 000055dc1da0bc50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ecf21c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33383a632e626966 2f6d697376656474 656e2f74656e2f73 7265766972642074 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746361706d692064 6c756f6320686369 6877203272657961 6c206e6f20646574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e656d6761726620 6562206c6c697720 656361667265746e 6920736968742072 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65766f20676e696f 67207374656b6361 50202e7374656b63 6170207664612d6e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616d74616220666f 2074726f70736e61 7274206568742065 6c646e6168206f74 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff95da3b38 RBX=0000000000000001 RCX=0000000012fb1be5 RDX=0000000000000000 RSI=000000009efe89d1 RDI=ffff888025142f58 RBP=ffff888025142440 RSP=ffffc900038df988 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff888025142f30 R13=ffff888025142f58 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff8197e6b2 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 000fffff 00000000 GS =0063 ffff88809785f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006000 CR3=0000000054e24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000