last executing test programs: 45.516144859s ago: executing program 0 (id=11): syz_emit_ethernet(0xde, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rt_sigpending(&(0x7f0000000340), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(r0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8802d, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x207) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3097c98, 0x0) unshare(0x2c020400) umount2(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="540100001800010000040000010000001d0100001500030006000000000000008ca5be073cff296e020000001e0106000000fc"], 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008030) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/171, 0xab) 43.964440718s ago: executing program 0 (id=22): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 42.943729904s ago: executing program 0 (id=28): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) 42.943186188s ago: executing program 0 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffbfffaaaaaaaaaabb8100ffff08004a00002800faf2"], 0x0) 42.917400284s ago: executing program 0 (id=31): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 42.834122324s ago: executing program 0 (id=32): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000050000000804", @ANYRES32, @ANYRES8, @ANYBLOB], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x7, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x8, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getown(r0, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x4}}]}, 0x38}}, 0x1000c840) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 27.833626497s ago: executing program 32 (id=32): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000050000000804", @ANYRES32, @ANYRES8, @ANYBLOB], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x7, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x8, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$getown(r0, 0x9) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r7, 0x5608, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x4}}]}, 0x38}}, 0x1000c840) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f00002f0000/0x3000)=nil) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 4.522968893s ago: executing program 3 (id=425): pipe(0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setfsgid(0xee00) 3.279427648s ago: executing program 3 (id=432): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x1c) 2.924008848s ago: executing program 4 (id=437): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x1}, 0x40) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.923732459s ago: executing program 4 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 2.871618911s ago: executing program 4 (id=439): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 2.803646895s ago: executing program 4 (id=440): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$P9_RLERRORu(r1, 0x0, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x2, 0xe, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000080)={0x8b, 0x4, 0x5}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket(0x22, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4140aecd, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) 2.395362023s ago: executing program 3 (id=441): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000a00)="ca", 0x1}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x0) sendto$rose(r2, 0x0, 0x0, 0x4000000, 0x0, 0x0) 1.933926623s ago: executing program 1 (id=460): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @from_mac=@device_b, {0x2, 0x5f}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x1480, 0x6, {}, @void, @val={0x2d, 0x1a, {0x8200, 0x1, 0x2, 0x0, {0x3, 0xd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x6, 0x6}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.931927261s ago: executing program 1 (id=461): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x2, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) 1.724017349s ago: executing program 1 (id=462): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) 1.723833894s ago: executing program 1 (id=463): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e48dfd9b6433253c4a45be4a4ecfb68983539bce7d5262f5e947fa1526b62267", "f4ba60103ac5764eefc385b337e6bdbf", {"dd3afcd3cc2e3a9be1de21e5021df740", "874665e65c68b83cd6ec4a03732e7a20"}}}}}}}, 0x0) 1.674100672s ago: executing program 1 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a32000000001400000011000100"], 0x78}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040100}, 0x24000000) 1.488312267s ago: executing program 3 (id=465): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3512, 0x0, 0x0, 0x0, 0x0) 1.475450037s ago: executing program 4 (id=466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @from_mac=@device_b, {0x2, 0x5f}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x1480, 0x6, {}, @void, @val={0x2d, 0x1a, {0x8200, 0x1, 0x2, 0x0, {0x3, 0xd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x6, 0x6}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.403867065s ago: executing program 4 (id=467): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000001c0)={0x1fb, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffffffffffc, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 1.183694554s ago: executing program 2 (id=472): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) 1.183446188s ago: executing program 2 (id=473): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) 1.181490592s ago: executing program 2 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) 1.103541146s ago: executing program 2 (id=475): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r0, &(0x7f0000004200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 883.749473ms ago: executing program 2 (id=476): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 783.921748ms ago: executing program 1 (id=477): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0xaa) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xe65, 0x3a, '\x05.\xa12\x05\x8f\x14}N\xc7]d\xe3\x84\xd7(EE\x10\x89\x92\xb4\x8f\x9d\x1f\x86n\xcc\xbb\xeb1f\xa4\xf3h\x06E\xc5\xe6O\xed\x96&\x1aCs*\xcd\xfe\xe8i9\xceLy\xad\xe3\'\xc9\x86\x9f\xe9\xbf|j\x915\x1e\x89\x05q\xedf \xae\x8cv)r\xef;67;6\xb4\x8c\xb4\xcb\xdbk\x0ej\x7f\xfa\xdco\xf3?\b\xe5^\xa8]\x9cL\xc2\x02\xf6-\xec\xf0Q\x82\xd96Z\xe8\xe3\x91\xff>\xd9\t\xe4\xbfBE\f\x87v\x85+)M\xe0\x8c,\xfd\xd2\x80V(\xf3\x85\xa0\xc7\xa3\x19\xab{\xf1:\xd6*W\x91#=Lg\x9f\xb4n1\x89\x142\x89V\xf5\xe1\xef\x9f\x12\x01Ub\xabW\xf3<\x9c<\x1e&\xefM\xba 6\xe2Br\"\xb0\x13\x8a\f\\\x9b\x116|k\xfaT\xbb\x024\xff\xb0}\x1b\xce\xe1e5\x1aG5\x03\x88=\xfe\xe9^\x8d\xf5\xfa\x14y?0\x9c\x18,\xe3\xca\xfa\xbc\xe5eTF5\x89&\x03\xc4E#hr\x0f\xca?\xdd\xd4N\x06t\x14Y\x94q\x93\xa2p|0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000040)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r8 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000004c0)) writev(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a", 0x12}], 0x2) 0s ago: executing program 1 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60896' (ED25519) to the list of known hosts. [ 42.540749][ T5932] cgroup: Unknown subsys name 'net' [ 42.668230][ T5932] cgroup: Unknown subsys name 'cpuset' [ 42.673870][ T5932] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.546842][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.980689][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.981566][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.983854][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.985297][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.988100][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.988781][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.990757][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.992995][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.994485][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.997366][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.999236][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.000550][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.002440][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.015248][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.016552][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.017752][ T5959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.019694][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.021728][ T5959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.025598][ T5959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.027892][ T5959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.275722][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 47.322946][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 47.371188][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 47.498203][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.501461][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.504929][ T5955] bridge_slave_0: entered allmulticast mode [ 47.508607][ T5955] bridge_slave_0: entered promiscuous mode [ 47.513920][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 47.585480][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.588185][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.590383][ T5955] bridge_slave_1: entered allmulticast mode [ 47.592993][ T5955] bridge_slave_1: entered promiscuous mode [ 47.622293][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.624403][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.626426][ T5951] bridge_slave_0: entered allmulticast mode [ 47.628790][ T5951] bridge_slave_0: entered promiscuous mode [ 47.679404][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.681457][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.683459][ T5951] bridge_slave_1: entered allmulticast mode [ 47.686902][ T5951] bridge_slave_1: entered promiscuous mode [ 47.723361][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.809004][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.814063][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.817584][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.820266][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.822921][ T5946] bridge_slave_0: entered allmulticast mode [ 47.826214][ T5946] bridge_slave_0: entered promiscuous mode [ 47.878979][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.882585][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.884802][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.886952][ T5946] bridge_slave_1: entered allmulticast mode [ 47.889278][ T5946] bridge_slave_1: entered promiscuous mode [ 47.891493][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.893480][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.896395][ T5961] bridge_slave_0: entered allmulticast mode [ 47.899293][ T5961] bridge_slave_0: entered promiscuous mode [ 47.904245][ T5955] team0: Port device team_slave_0 added [ 47.937913][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.939876][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.941836][ T5961] bridge_slave_1: entered allmulticast mode [ 47.944407][ T5961] bridge_slave_1: entered promiscuous mode [ 47.948286][ T5955] team0: Port device team_slave_1 added [ 48.035692][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.038078][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.048208][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.053633][ T5951] team0: Port device team_slave_0 added [ 48.057105][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.071728][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.074786][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.081836][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.086255][ T5951] team0: Port device team_slave_1 added [ 48.089238][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.093236][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.100448][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.152429][ T5946] team0: Port device team_slave_0 added [ 48.184120][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.186288][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.192747][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.197934][ T5946] team0: Port device team_slave_1 added [ 48.261294][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.263277][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.270376][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.322006][ T5961] team0: Port device team_slave_0 added [ 48.327280][ T5955] hsr_slave_0: entered promiscuous mode [ 48.329187][ T5955] hsr_slave_1: entered promiscuous mode [ 48.355489][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.357946][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.366353][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.372150][ T5961] team0: Port device team_slave_1 added [ 48.399563][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.401992][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.411015][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.495675][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.497726][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.505503][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.526868][ T5951] hsr_slave_0: entered promiscuous mode [ 48.529656][ T5951] hsr_slave_1: entered promiscuous mode [ 48.532243][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.535389][ T5951] Cannot create hsr debugfs directory [ 48.567545][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.569472][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.576521][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.595858][ T5946] hsr_slave_0: entered promiscuous mode [ 48.597900][ T5946] hsr_slave_1: entered promiscuous mode [ 48.599948][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.602595][ T5946] Cannot create hsr debugfs directory [ 48.701156][ T5961] hsr_slave_0: entered promiscuous mode [ 48.703268][ T5961] hsr_slave_1: entered promiscuous mode [ 48.706311][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.708545][ T5961] Cannot create hsr debugfs directory [ 48.958227][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.967951][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.972447][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.976672][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.006203][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.010861][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.015614][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.019454][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.051304][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.056234][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.064684][ T5959] Bluetooth: hci3: command tx timeout [ 49.064687][ T5953] Bluetooth: hci1: command tx timeout [ 49.064847][ T5948] Bluetooth: hci2: command tx timeout [ 49.064852][ T5953] Bluetooth: hci0: command tx timeout [ 49.069662][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.075115][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.111339][ T5961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.116527][ T5961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.121153][ T5961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.134857][ T5961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.190728][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.198954][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.221939][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.231541][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.237447][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.239581][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.244552][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.252691][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.254835][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.261433][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.263502][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.272369][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.274435][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.286909][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.290266][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.302297][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.304359][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.320419][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.322435][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.327701][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.340005][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.342030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.356115][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.358111][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.434559][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.450596][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.465452][ T5951] veth0_vlan: entered promiscuous mode [ 49.469769][ T5951] veth1_vlan: entered promiscuous mode [ 49.495540][ T5955] veth0_vlan: entered promiscuous mode [ 49.508424][ T5955] veth1_vlan: entered promiscuous mode [ 49.511933][ T5951] veth0_macvtap: entered promiscuous mode [ 49.516994][ T5951] veth1_macvtap: entered promiscuous mode [ 49.523947][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.532524][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.538014][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.546370][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.550332][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.552804][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.555569][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.557954][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.586091][ T5955] veth0_macvtap: entered promiscuous mode [ 49.591674][ T5961] veth0_vlan: entered promiscuous mode [ 49.599335][ T5955] veth1_macvtap: entered promiscuous mode [ 49.619041][ T5946] veth0_vlan: entered promiscuous mode [ 49.628956][ T5961] veth1_vlan: entered promiscuous mode [ 49.636752][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.638870][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.638973][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.641883][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.642566][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.649216][ T5946] veth1_vlan: entered promiscuous mode [ 49.662939][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.666555][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.669889][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.677588][ T1193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.679863][ T1193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.681178][ T5961] veth0_macvtap: entered promiscuous mode [ 49.685879][ T5955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.688395][ T5955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.690845][ T5955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.693342][ T5955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.701775][ T5961] veth1_macvtap: entered promiscuous mode [ 49.717339][ T5946] veth0_macvtap: entered promiscuous mode [ 49.726452][ T5946] veth1_macvtap: entered promiscuous mode [ 49.735366][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.738280][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.740838][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.744236][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.747696][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.756394][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.765003][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.768740][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.772038][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.775855][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.780254][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.785377][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.788917][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.791742][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.795492][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.798955][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.802594][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.807441][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.811293][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.813420][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.815526][ T5961] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.817913][ T5961] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.821428][ T5961] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.824302][ T5961] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.830887][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.834197][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.836389][ T6009] Zero length message leads to an empty skb [ 49.836885][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.841426][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.844653][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.847574][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.850989][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.866110][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.869028][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.871884][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.875065][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.888035][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.890623][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.891816][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 49.916070][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.918544][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.929763][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.932658][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.942068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.948240][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.959584][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.961732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.041614][ T6026] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 50.167685][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 50.224179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.293951][ T5988] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 50.457063][ T5988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.459957][ T5988] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 50.465130][ T5988] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 50.467715][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.469933][ T5988] usb 6-1: Product: syz [ 50.471127][ T5988] usb 6-1: Manufacturer: syz [ 50.472473][ T5988] usb 6-1: SerialNumber: syz [ 50.481023][ T5988] usb 6-1: config 0 descriptor?? [ 50.590309][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.689105][ T5948] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 50.690786][ T6006] usb 6-1: USB disconnect, device number 2 [ 51.131134][ T40] audit: type=1326 audit(1744153811.018:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.137075][ T40] audit: type=1326 audit(1744153811.018:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.143317][ T40] audit: type=1326 audit(1744153811.018:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.143906][ T5948] Bluetooth: hci3: command tx timeout [ 51.149792][ T40] audit: type=1326 audit(1744153811.018:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.151092][ T5959] Bluetooth: hci1: command tx timeout [ 51.157348][ T5948] Bluetooth: hci2: command tx timeout [ 51.160656][ T40] audit: type=1326 audit(1744153811.018:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.167457][ T40] audit: type=1326 audit(1744153811.018:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.173347][ T40] audit: type=1326 audit(1744153811.018:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.179841][ T40] audit: type=1326 audit(1744153811.018:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.185894][ T40] audit: type=1326 audit(1744153811.018:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.191715][ T40] audit: type=1326 audit(1744153811.018:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 51.354583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.433771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.484626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.489720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.620597][ T1331] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.816852][ T1331] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.845118][ T1331] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 51.848444][ T1331] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.850682][ T1331] usb 8-1: Product: syz [ 51.851890][ T1331] usb 8-1: Manufacturer: syz [ 51.853232][ T1331] usb 8-1: SerialNumber: syz [ 51.957125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 51.992123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 52.073704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 52.127201][ T1331] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 52.303923][ T6014] usb 8-1: USB disconnect, device number 2 [ 52.324584][ T6014] usblp0: removed [ 52.424914][ T6079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.456592][ T6080] netlink: 'syz.1.26': attribute type 10 has an invalid length. [ 52.459129][ T6080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26'. [ 52.474439][ T6080] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 52.477204][ T6080] team0: Failed to send options change via netlink (err -105) [ 52.479641][ T6080] team0: Port device geneve0 added [ 52.553799][ T58] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.703728][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 52.707319][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 52.710348][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 52.713772][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.716916][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.720467][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.723056][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.813736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 52.931516][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 52.933486][ T58] usbtmc 7-1:16.0: can't read capabilities [ 53.133797][ T9] usb 7-1: USB disconnect, device number 2 [ 53.224138][ T5948] Bluetooth: hci1: command tx timeout [ 53.234104][ T5948] Bluetooth: hci2: command tx timeout [ 53.234129][ T5959] Bluetooth: hci3: command tx timeout [ 53.745505][ T6079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.825936][ T6079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.909063][ T6079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.987887][ T6079] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.995528][ T6079] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.001703][ T6079] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.012256][ T6079] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.329000][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 54.541747][ T6177] netlink: 96 bytes leftover after parsing attributes in process `syz.2.44'. [ 54.544494][ T6177] netlink: 96 bytes leftover after parsing attributes in process `syz.2.44'. [ 54.755344][ T5959] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 54.758952][ T5959] Bluetooth: hci0: Injecting HCI hardware error event [ 54.761115][ T5959] Bluetooth: hci0: hardware error 0x00 [ 55.305253][ T5948] Bluetooth: hci2: command tx timeout [ 55.305484][ T5303] Bluetooth: hci1: command tx timeout [ 55.306797][ T5948] Bluetooth: hci3: command tx timeout [ 55.675200][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 55.789807][ T6216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.56'. [ 55.792245][ T6216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.56'. [ 56.156087][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 56.156099][ T40] audit: type=1326 audit(1744153816.048:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.169203][ T40] audit: type=1326 audit(1744153816.048:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.175300][ T40] audit: type=1326 audit(1744153816.068:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.181708][ T40] audit: type=1326 audit(1744153816.068:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.188754][ T40] audit: type=1326 audit(1744153816.068:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.194964][ T40] audit: type=1326 audit(1744153816.068:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.200952][ T40] audit: type=1326 audit(1744153816.068:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.208127][ T40] audit: type=1326 audit(1744153816.068:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.214074][ T40] audit: type=1326 audit(1744153816.068:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.220927][ T40] audit: type=1326 audit(1744153816.068:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.61" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 56.223850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.282215][ T6233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.322958][ T6234] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 56.325739][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.3.63'. [ 56.337211][ T6234] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 56.339750][ T6234] team0: Failed to send options change via netlink (err -105) [ 56.341847][ T6234] team0: Port device geneve0 added [ 56.352214][ T6233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.424826][ T6233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.502274][ T6233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.605845][ T6233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.612512][ T6233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.620772][ T6233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.627049][ T6233] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.760736][ T6258] process 'syz.2.69' launched './file2' with NULL argv: empty string added [ 56.766801][ T6260] netlink: 96 bytes leftover after parsing attributes in process `syz.1.75'. [ 56.769258][ T6260] netlink: 96 bytes leftover after parsing attributes in process `syz.1.75'. [ 56.824346][ T5959] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 57.141238][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 57.856598][ T6289] netlink: 96 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.860948][ T6289] netlink: 96 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.983785][ T3230] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.145416][ T3230] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.148123][ T3230] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.151896][ T3230] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.157527][ T3230] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 58.161623][ T3230] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 58.167372][ T3230] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.170843][ T3230] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.174181][ T3230] usb 7-1: Product: syz [ 58.175926][ T3230] usb 7-1: Manufacturer: syz [ 58.180593][ T3230] cdc_wdm 7-1:1.0: skipping garbage [ 58.182090][ T3230] cdc_wdm 7-1:1.0: skipping garbage [ 58.185400][ T3230] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 58.187120][ T3230] cdc_wdm 7-1:1.0: Unknown control protocol [ 58.500748][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 58.501593][ T835] usb 7-1: USB disconnect, device number 3 [ 58.503881][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 58.508356][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 58.916157][ T6315] netlink: 96 bytes leftover after parsing attributes in process `syz.3.94'. [ 59.450945][ T6331] capability: warning: `syz.3.100' uses deprecated v2 capabilities in a way that may be insecure [ 61.210955][ T6359] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 61.600358][ T6381] __nla_validate_parse: 1 callbacks suppressed [ 61.600373][ T6381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.119'. [ 61.633134][ T6383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.120'. [ 61.635733][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 61.638193][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.120'. [ 61.881989][ C0] Unknown status report in ack skb [ 61.916930][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 62.014132][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 62.014142][ T40] audit: type=1326 audit(1744153821.908:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.023008][ T40] audit: type=1326 audit(1744153821.908:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.029137][ T40] audit: type=1326 audit(1744153821.908:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.035063][ T40] audit: type=1326 audit(1744153821.908:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.041162][ T40] audit: type=1326 audit(1744153821.908:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.047378][ T40] audit: type=1326 audit(1744153821.908:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.053265][ T40] audit: type=1326 audit(1744153821.908:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.059785][ T40] audit: type=1326 audit(1744153821.908:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.066672][ T40] audit: type=1326 audit(1744153821.908:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.072381][ T40] audit: type=1326 audit(1744153821.908:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 62.090302][ T6407] fuse: Bad value for 'fd' [ 62.446805][ T6422] IPv6: Can't replace route, no match found [ 62.635348][ T6443] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 62.706687][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 63.233548][ T6470] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 63.740196][ T6496] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.795759][ T6500] netlink: 36 bytes leftover after parsing attributes in process `+|[@'. [ 63.806889][ T6496] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.896470][ T6496] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.977167][ T6496] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.048950][ T6496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.055177][ T6496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.061057][ T6496] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.067740][ T6496] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.828945][ T6568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.193'. [ 66.887613][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 67.054877][ T6578] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 67.105463][ T6583] netlink: 28 bytes leftover after parsing attributes in process `+|[@'. [ 67.108283][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 67.108291][ T40] audit: type=1326 audit(1744153826.998:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.117019][ T40] audit: type=1326 audit(1744153826.998:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.124350][ T40] audit: type=1326 audit(1744153826.998:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.131247][ T40] audit: type=1326 audit(1744153826.998:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.138408][ T40] audit: type=1326 audit(1744153826.998:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.145584][ T40] audit: type=1326 audit(1744153826.998:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.152944][ T40] audit: type=1326 audit(1744153826.998:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.160841][ T40] audit: type=1326 audit(1744153826.998:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.169964][ T40] audit: type=1326 audit(1744153826.998:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.178230][ T40] audit: type=1326 audit(1744153826.998:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 67.188724][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 68.000858][ T57] cfg80211: failed to load regulatory.db [ 68.125099][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.128545][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.133034][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.137270][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.140073][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.286946][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 68.385256][ T6144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.448775][ T6144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.456710][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.459535][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.462100][ T6626] bridge_slave_0: entered allmulticast mode [ 68.465249][ T6626] bridge_slave_0: entered promiscuous mode [ 68.469633][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.472375][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.475275][ T6626] bridge_slave_1: entered allmulticast mode [ 68.478738][ T6626] bridge_slave_1: entered promiscuous mode [ 68.519572][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.523970][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.562183][ T6144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.569857][ T6626] team0: Port device team_slave_0 added [ 68.573308][ T6626] team0: Port device team_slave_1 added [ 68.604737][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.606761][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.614770][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.625185][ T6144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.630412][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.632372][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.639294][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.696884][ T6626] hsr_slave_0: entered promiscuous mode [ 68.699501][ T6626] hsr_slave_1: entered promiscuous mode [ 68.701395][ T6626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.703515][ T6626] Cannot create hsr debugfs directory [ 68.785330][ T6144] bridge_slave_1: left allmulticast mode [ 68.787603][ T6144] bridge_slave_1: left promiscuous mode [ 68.790174][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.796714][ T6144] bridge_slave_0: left allmulticast mode [ 68.798380][ T6144] bridge_slave_0: left promiscuous mode [ 68.800082][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.020591][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.026790][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.030218][ T6144] bond0 (unregistering): Released all slaves [ 69.048582][ T6644] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.101642][ T6644] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.118885][ T6644] netlink: 68 bytes leftover after parsing attributes in process `syz.1.218'. [ 69.182173][ T6626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.201997][ T6626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.206608][ T6626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.211201][ T6626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.288807][ T6659] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.300165][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.319258][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.330629][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.332537][ T6662] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 69.332625][ T6140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.335578][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 69.341340][ T6662] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 69.351208][ T6144] hsr_slave_0: left promiscuous mode [ 69.354187][ T6144] hsr_slave_1: left promiscuous mode [ 69.356326][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.358815][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.362067][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.366506][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.384952][ T6144] veth1_macvtap: left promiscuous mode [ 69.387236][ T6144] veth0_macvtap: left promiscuous mode [ 69.389004][ T6144] veth1_vlan: left promiscuous mode [ 69.391076][ T6144] veth0_vlan: left promiscuous mode [ 69.849054][ T6144] team0 (unregistering): Port device team_slave_1 removed [ 69.893879][ T6144] team0 (unregistering): Port device team_slave_0 removed [ 70.185311][ T5959] Bluetooth: hci2: command tx timeout [ 70.234148][ T6659] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.241374][ T6664] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 70.246681][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.249366][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.339672][ T6659] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.425919][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.459247][ T6659] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.556760][ T6659] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.569669][ T6659] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.585427][ T6659] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.597309][ T6659] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.613597][ T6626] veth0_vlan: entered promiscuous mode [ 70.638933][ T6626] veth1_vlan: entered promiscuous mode [ 70.672779][ T6626] veth0_macvtap: entered promiscuous mode [ 70.682170][ T6626] veth1_macvtap: entered promiscuous mode [ 70.695618][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.699592][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.703292][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.708952][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.712785][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.720392][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.727149][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.738401][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.741846][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.745673][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.748773][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.749801][ T6700] netlink: 152 bytes leftover after parsing attributes in process `syz.2.229'. [ 70.751449][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.751458][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.755977][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.760497][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.762259][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.770214][ T6626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.773291][ T6626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.777370][ T6626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.780475][ T6626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.821741][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.825356][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.838717][ T6162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.840889][ T6162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.943746][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.074337][ T34] usb 8-1: device descriptor read/64, error -71 [ 71.323811][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.325460][ T6740] ubi31: attaching mtd0 [ 71.328412][ T6740] ubi31: scanning is finished [ 71.329708][ T6740] ubi31: empty MTD device detected [ 71.413768][ T6740] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 71.416098][ T6740] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 71.418772][ T6740] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 71.421848][ T6740] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 71.426579][ T6740] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 71.429062][ T6740] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 71.431466][ T6740] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1945722765 [ 71.434484][ T6740] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 71.437866][ T6745] ubi31: background thread "ubi_bgt31d" started, PID 6745 [ 71.454970][ T34] usb 8-1: device descriptor read/64, error -71 [ 71.564006][ T34] usb usb8-port1: attempt power cycle [ 71.903743][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 71.927487][ T34] usb 8-1: device descriptor read/8, error -71 [ 72.163848][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.186607][ T34] usb 8-1: device descriptor read/8, error -71 [ 72.263954][ T5959] Bluetooth: hci2: command tx timeout [ 72.294933][ T34] usb usb8-port1: unable to enumerate USB device [ 72.589602][ T6781] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.639131][ T6783] netlink: 'syz.1.242': attribute type 10 has an invalid length. [ 72.642043][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.242'. [ 72.646424][ T6783] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 72.656839][ T6781] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.718438][ T6781] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.737486][ T6784] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 72.836659][ T6781] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.914789][ T6781] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.920897][ T6781] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.927135][ T6781] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.938804][ T6781] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022717][ T6839] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 74.025138][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.262'. [ 74.106871][ T6837] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.188214][ T6837] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.346656][ T6837] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.354477][ T5959] Bluetooth: hci2: command tx timeout [ 74.505684][ T6837] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.698492][ T6852] input: syz1 as /devices/virtual/input/input6 [ 75.035418][ T6837] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042415][ T6837] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052237][ T6837] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.062415][ T6837] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.171178][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 75.184488][ T6862] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.187062][ T6862] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 75.609632][ T6878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.649778][ T6879] netlink: 'syz.2.276': attribute type 10 has an invalid length. [ 75.651940][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.276'. [ 75.663610][ T6879] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 75.668341][ T6879] team0: Failed to send options change via netlink (err -105) [ 75.671122][ T6879] team0: Port device geneve0 added [ 75.686405][ T6878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.732686][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 75.738700][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 75.781820][ T6878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.860602][ T6878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.935164][ T6878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.944505][ T6878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.955608][ T6878] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.965733][ T6878] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363756][ T3230] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.424356][ T5959] Bluetooth: hci2: command tx timeout [ 76.513877][ T3230] usb 6-1: Using ep0 maxpacket: 16 [ 76.517361][ T3230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 76.520785][ T3230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 76.525873][ T3230] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 76.533956][ T3230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.554080][ T3230] usb 6-1: config 0 descriptor?? [ 76.990608][ T3230] kovaplus 0003:1E7D:2D50.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 77.019112][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 77.019134][ T40] audit: type=1326 audit(1744153836.908:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.028568][ T40] audit: type=1326 audit(1744153836.918:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.035907][ T40] audit: type=1326 audit(1744153836.918:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.043410][ T40] audit: type=1326 audit(1744153836.918:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.050785][ T40] audit: type=1326 audit(1744153836.918:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.057243][ T40] audit: type=1326 audit(1744153836.918:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.063259][ T40] audit: type=1326 audit(1744153836.918:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.069310][ T40] audit: type=1326 audit(1744153836.918:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.078867][ T40] audit: type=1326 audit(1744153836.918:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.086141][ T40] audit: type=1326 audit(1744153836.918:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6902 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 77.231487][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 77.236200][ T6908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 77.239666][ T6908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 77.588417][ T3230] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 77.590690][ T3230] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 77.594260][ T3230] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 77.606137][ T3230] usb 6-1: USB disconnect, device number 3 [ 78.139307][ T6923] dccp_close: ABORT with 1 bytes unread [ 78.196830][ T6929] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.478514][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 79.332170][ T6014] IPVS: starting estimator thread 0... [ 79.430440][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 79.433832][ T6959] IPVS: using max 22 ests per chain, 52800 per kthread [ 79.783757][ T5947] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 79.829389][ T6979] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 79.930922][ T6986] tipc: Started in network mode [ 79.932394][ T6986] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 79.935040][ T6986] tipc: Enabled bearer , priority 0 [ 79.945713][ T5947] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.948258][ T5947] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.951181][ T5947] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.953846][ T5947] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.957014][ T5947] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.961815][ T5947] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.963339][ T6988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 79.964495][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.969661][ T5947] usb 6-1: Product: syz [ 79.970904][ T5947] usb 6-1: Manufacturer: syz [ 79.980221][ T5947] cdc_wdm 6-1:1.0: skipping garbage [ 79.981802][ T5947] cdc_wdm 6-1:1.0: skipping garbage [ 79.986949][ T5947] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 79.988714][ T5947] cdc_wdm 6-1:1.0: Unknown control protocol [ 80.255032][ T6996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.266226][ T6999] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.291356][ T7001] netlink: 'syz.4.320': attribute type 10 has an invalid length. [ 80.294305][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.320'. [ 80.304777][ T7001] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 80.307582][ T7001] team0: Failed to send options change via netlink (err -105) [ 80.310680][ T7001] team0: Port device geneve0 added [ 80.320779][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 80.327664][ T7003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 80.331503][ T7003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 80.343384][ T6996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.390142][ T7008] netlink: 'syz.2.324': attribute type 39 has an invalid length. [ 80.410263][ T6996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.523045][ T6996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.601227][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 80.642258][ T6996] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.655458][ T6996] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.665502][ T6996] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.677637][ T6996] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.944734][ T835] tipc: Node number set to 11578026 [ 81.274429][ T7030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.284812][ T7055] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 82.477388][ T7070] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.524291][ T7074] netlink: 'syz.4.344': attribute type 10 has an invalid length. [ 82.526478][ T7074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.344'. [ 82.530187][ T7074] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 82.567398][ T7070] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.637267][ T7070] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.720488][ T7070] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.922596][ T5947] usb 6-1: USB disconnect, device number 4 [ 82.950025][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.350'. [ 83.105493][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 83.107788][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 83.107798][ T40] audit: type=1326 audit(1744153842.998:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.118767][ T40] audit: type=1326 audit(1744153843.008:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.125766][ T40] audit: type=1326 audit(1744153843.008:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.131909][ T40] audit: type=1326 audit(1744153843.008:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.138096][ T40] audit: type=1326 audit(1744153843.008:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.144393][ T40] audit: type=1326 audit(1744153843.008:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.150513][ T40] audit: type=1326 audit(1744153843.008:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.161729][ T40] audit: type=1326 audit(1744153843.008:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.171225][ T40] audit: type=1326 audit(1744153843.008:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 83.179096][ T40] audit: type=1326 audit(1744153843.008:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.1.352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2579 code=0x7ffc0000 [ 84.387753][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 84.683800][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.798978][ T7070] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.805005][ T7070] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.811107][ T7070] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820921][ T7070] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.838314][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.840735][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 84.843786][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.846336][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 84.849308][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 84.861305][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.866471][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.868679][ T24] usb 6-1: Product: syz [ 84.869849][ T24] usb 6-1: Manufacturer: syz [ 84.874539][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 84.876085][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 84.879463][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 84.881161][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 85.143832][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.313761][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 85.316710][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.320668][ T34] usb 9-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 85.324108][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.329638][ T34] usb 9-1: config 0 descriptor?? [ 85.383867][ T7168] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 85.648626][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 85.741412][ T34] aquacomputer_d5next 0003:0C70:F010.0003: hidraw1: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.4-1/input0 [ 86.986297][ T7193] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.018691][ T7195] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.811951][ T57] usb 6-1: USB disconnect, device number 5 [ 87.952891][ T9] usb 9-1: USB disconnect, device number 2 [ 88.027968][ T24] IPVS: starting estimator thread 0... [ 88.123806][ T7212] IPVS: using max 46 ests per chain, 110400 per kthread [ 88.164955][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 88.852713][ T7225] netlink: 'syz.1.385': attribute type 39 has an invalid length. [ 89.249193][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 89.251761][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 89.254816][ T7256] netlink: 'syz.4.398': attribute type 5 has an invalid length. [ 89.363512][ T7265] netlink: 'syz.3.402': attribute type 39 has an invalid length. [ 89.721093][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 89.989260][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 90.083612][ T7288] netlink: 152 bytes leftover after parsing attributes in process `syz.2.410'. [ 90.603839][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 90.763839][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 90.769098][ T34] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 90.771930][ T34] usb 7-1: config 0 has no interface number 0 [ 90.775072][ T34] usb 7-1: config 0 interface 12 has no altsetting 0 [ 90.779365][ T34] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 90.782725][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.785334][ T34] usb 7-1: Product: syz [ 90.786615][ T34] usb 7-1: Manufacturer: syz [ 90.788396][ T34] usb 7-1: SerialNumber: syz [ 90.792651][ T34] usb 7-1: config 0 descriptor?? [ 90.901359][ T7307] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.948104][ T7307] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.951579][ T7312] netlink: 'syz.3.418': attribute type 10 has an invalid length. [ 90.955017][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.418'. [ 91.038255][ T7307] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.100526][ T7307] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.185893][ T7307] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.193043][ T7307] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.199766][ T7307] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.206314][ T7307] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.833010][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 92.842514][ T7352] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 93.028010][ T34] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 93.030635][ T34] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 93.038500][ T34] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 93.041565][ T34] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 93.047679][ T34] usb 7-1: USB disconnect, device number 4 [ 93.343818][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 93.493785][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 93.502249][ T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 93.512158][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.515598][ T24] usb 9-1: Product: syz [ 93.517841][ T24] usb 9-1: Manufacturer: syz [ 93.519174][ T24] usb 9-1: SerialNumber: syz [ 93.521604][ T24] usb 9-1: config 0 descriptor?? [ 93.529344][ T24] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 93.530424][ T7370] capability: warning: `syz.1.444' uses 32-bit capabilities (legacy support in use) [ 93.615073][ T7382] netlink: 292 bytes leftover after parsing attributes in process `syz.1.449'. [ 93.730262][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 93.739394][ T24] ssu100 9-1:0.0: probe with driver ssu100 failed with error -71 [ 93.750955][ T24] usb 9-1: USB disconnect, device number 3 [ 94.653727][ T5947] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 94.815345][ T5947] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.818748][ T5947] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.822447][ T5947] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.825976][ T5947] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.830102][ T5947] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.835979][ T5947] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.838977][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.841173][ T5947] usb 9-1: Product: syz [ 94.842367][ T5947] usb 9-1: Manufacturer: syz [ 94.847942][ T5947] cdc_wdm 9-1:1.0: skipping garbage [ 94.849440][ T5947] cdc_wdm 9-1:1.0: skipping garbage [ 94.851663][ T5947] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 94.853344][ T5947] cdc_wdm 9-1:1.0: Unknown control protocol [ 95.009825][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 95.013225][ T7445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.016669][ T7445] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.169094][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 95.169198][ T24] usb 9-1: USB disconnect, device number 4 [ 95.171052][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 95.174578][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 95.856359][ T40] audit: type=1326 audit(1744153855.748:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.864244][ T40] audit: type=1326 audit(1744153855.748:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.870156][ T40] audit: type=1326 audit(1744153855.748:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.874025][ T7459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.875928][ T40] audit: type=1326 audit(1744153855.748:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.886164][ T40] audit: type=1326 audit(1744153855.748:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.888227][ T7459] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 95.894274][ T40] audit: type=1326 audit(1744153855.748:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.898494][ T7459] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 7459, name: syz.1.481 [ 95.909045][ T40] audit: type=1326 audit(1744153855.748:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.911822][ T7459] preempt_count: 0, expected: 0 [ 95.927146][ T7459] RCU nest depth: 1, expected: 0 [ 95.929784][ T7459] 4 locks held by syz.1.481/7459: [ 95.933917][ T7459] #0: ffff888022859978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 95.936574][ T7459] #1: ffff888043a25258 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 [ 95.939884][ T7459] #2: ffff88804e858b88 (&type->i_mutex_dir_key#8){.+.+}-{4:4}, at: iterate_dir+0x18b/0xb40 [ 95.941217][ T40] audit: type=1326 audit(1744153855.748:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.942797][ T7459] #3: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50 [ 95.948597][ T40] audit: type=1326 audit(1744153855.748:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.948621][ T40] audit: type=1326 audit(1744153855.748:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 95.963458][ T7459] CPU: 3 UID: 0 PID: 7459 Comm: syz.1.481 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 95.963476][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.963484][ T7459] Call Trace: [ 95.963490][ T7459] [ 95.963496][ T7459] dump_stack_lvl+0x16c/0x1f0 [ 95.963523][ T7459] __might_resched+0x3c0/0x5e0 [ 95.963542][ T7459] ? find_held_lock+0x2b/0x80 [ 95.963563][ T7459] ? __pfx___might_resched+0x10/0x10 [ 95.963591][ T7459] ? ovl_cache_entry_new+0x3d/0x730 [ 95.963608][ T7459] __kmalloc_noprof+0x386/0x510 [ 95.963633][ T7459] ovl_cache_entry_new+0x3d/0x730 [ 95.963669][ T7459] ovl_fill_merge+0x2c1/0xa90 [ 95.963688][ T7459] afs_dynroot_readdir+0x9bb/0xf50 [ 95.963703][ T7459] ? __pfx_ovl_fill_merge+0x10/0x10 [ 95.963721][ T7459] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 95.963737][ T7459] ? apparmor_file_permission+0x251/0x400 [ 95.963755][ T7459] iterate_dir+0x293/0xb40 [ 95.963775][ T7459] ovl_dir_read_merged+0x3ef/0x5d0 [ 95.963790][ T7459] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 95.963808][ T7459] ? __pfx_ovl_fill_merge+0x10/0x10 [ 95.963831][ T7459] ? kasan_save_track+0x14/0x30 [ 95.963851][ T7459] ovl_iterate+0x86c/0xe40 [ 95.963867][ T7459] ? __pfx_down_read_killable+0x10/0x10 [ 95.963881][ T7459] ? __pfx_ovl_iterate+0x10/0x10 [ 95.963895][ T7459] wrap_directory_iterator+0x9f/0xe0 [ 95.963912][ T7459] iterate_dir+0x293/0xb40 [ 95.963931][ T7459] __ia32_compat_sys_getdents+0x14d/0x2c0 [ 95.963947][ T7459] ? __ia32_sys_futex_time32+0x2fc/0x460 [ 95.963975][ T7459] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 95.963992][ T7459] ? __pfx_compat_filldir+0x10/0x10 [ 95.964008][ T7459] ? ovl_dir_llseek+0x2c2/0x4d0 [ 95.964023][ T7459] ? rcu_is_watching+0x12/0xc0 [ 95.964042][ T7459] __do_fast_syscall_32+0x73/0x120 [ 95.964062][ T7459] do_fast_syscall_32+0x32/0x80 [ 95.964081][ T7459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.964096][ T7459] RIP: 0023:0xf7ff2579 [ 95.964107][ T7459] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.964119][ T7459] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 000000000000008d [ 95.964131][ T7459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 95.964138][ T7459] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.964145][ T7459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.964152][ T7459] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 95.964159][ T7459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.964176][ T7459] VM DIAGNOSIS: 23:10:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bd005 RDI=ffffffff9ae12bc0 RBP=ffffffff9ae12b80 RSP=ffffc900006bf888 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9ae12b80 R15=ffffffff854bcfa0 RIP=ffffffff854bd02f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3bf5b1 CR3=00000000701ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=000000000000004c RCX=ffffc90003a69000 RDX=0000000000080000 RSI=ffffffff819b1f60 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90003337758 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000666eee R13=0000000000000200 R14=ffff88801d768000 R15=ffffc90003337828 RIP=ffffffff81bb3d33 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3bf579 CR3=000000006aa10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888021bca440 RBX=ffffc90006986f48 RCX=ffffffff8169ff44 RDX=1ffff92000d30ddc RSI=0000000000000000 RDI=ffffc90006986f18 RBP=ffff888021bca440 RSP=ffffc90006986e68 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90006986eb8 R11=0000000000000000 R12=0000000000000000 R13=ffffc90006986f78 R14=ffffc90006986eb8 R15=ffffc90006986ee0 RIP=ffffffff8169ff59 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a9a2be08e8 CR3=000000004ce74000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=11c49f7b9b4fa8c7 f1ae38fa129de281 11c49f7b9b4fa8c7 f1ae38fa129de281 11c49f7b9b4fa8c7 f1ae38fa129de281 11c49f7b9b4fa8c7 f1ae38fa129de281 ZMM18=662e8ce71125c34e 8d9f3c54822a3c3a 662e8ce71125c34e 8d9f3c54822a3c3a 662e8ce71125c34e 8d9f3c54822a3c3a 662e8ce71125c34e 8d9f3c54822a3c3a ZMM19=2606000000000000 0000000000000005 2606000000000000 0000000000000004 2606000000000000 0000000000000003 2606000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=f1ae38faf1ae38fa f1ae38faf1ae38fa f1ae38faf1ae38fa f1ae38faf1ae38fa f1ae38faf1ae38fa f1ae38faf1ae38fa f1ae38faf1ae38fa f1ae38faf1ae38fa ZMM22=9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 9b4fa8c79b4fa8c7 ZMM23=11c49f7b11c49f7b 11c49f7b11c49f7b 11c49f7b11c49f7b 11c49f7b11c49f7b 11c49f7b11c49f7b 11c49f7b11c49f7b 11c49f7b11c49f7b 11c49f7b11c49f7b ZMM24=822a3c3a822a3c3a 822a3c3a822a3c3a 822a3c3a822a3c3a 822a3c3a822a3c3a 822a3c3a822a3c3a 822a3c3a822a3c3a 822a3c3a822a3c3a 822a3c3a822a3c3a ZMM25=8d9f3c548d9f3c54 8d9f3c548d9f3c54 8d9f3c548d9f3c54 8d9f3c548d9f3c54 8d9f3c548d9f3c54 8d9f3c548d9f3c54 8d9f3c548d9f3c54 8d9f3c548d9f3c54 ZMM26=1125c34e1125c34e 1125c34e1125c34e 1125c34e1125c34e 1125c34e1125c34e 1125c34e1125c34e 1125c34e1125c34e 1125c34e1125c34e 1125c34e1125c34e ZMM27=662e8ce7662e8ce7 662e8ce7662e8ce7 662e8ce7662e8ce7 662e8ce7662e8ce7 662e8ce7662e8ce7 662e8ce7662e8ce7 662e8ce7662e8ce7 662e8ce7662e8ce7 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2506000025060000 2506000025060000 2506000025060000 2506000025060000 2506000025060000 2506000025060000 2506000025060000 2506000025060000 info registers vcpu 3 CPU#3 RAX=00000000001d60ff RBX=0000000000000003 RCX=ffffffff8b6ff439 RDX=0000000000000000 RSI=ffffffff8dbeaf36 RDI=ffffffff8bf451c0 RBP=ffffed1003b58000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dac0000 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6fdccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74b6188 CR3=0000000026790000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=fffffff800000000 Opmask01=00000000fffffff8 Opmask02=0000000000000040 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea0c5dfc0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75636578652d7a79 732f223d65786520 22405b7c2b223d6d 6d6f632036353437 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c636163652d7320 332f223030303020 22405b722b20303d 6769632022353437 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65646f6320393735 363466376678303d 706920313d746170 6d6f63203034323d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a303d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000