last executing test programs: 1m37.109067789s ago: executing program 0 (id=3340): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x393881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 1m34.88330534s ago: executing program 2 (id=3069): r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r8, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000140)='^', 0x1}]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r9) 1m18.506774614s ago: executing program 0 (id=3340): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x393881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 1m16.62871251s ago: executing program 2 (id=3069): r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r8, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000140)='^', 0x1}]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r9) 1m1.543901309s ago: executing program 0 (id=3340): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x393881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 59.335470424s ago: executing program 2 (id=3069): r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r8, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000140)='^', 0x1}]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r9) 43.700802543s ago: executing program 0 (id=3340): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x393881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 42.057652175s ago: executing program 2 (id=3069): r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r8, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000140)='^', 0x1}]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r9) 23.508397867s ago: executing program 0 (id=3340): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x393881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 21.463564738s ago: executing program 2 (id=3069): r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r8, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000140)='^', 0x1}]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r9) 10.335504725s ago: executing program 3 (id=3552): mmap(&(0x7f0000dfa000/0x4000)=nil, 0x4000, 0x7, 0x810, 0xffffffffffffffff, 0xffffe000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80fe) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000140)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x5, 0x0, 0x0, 0x13fe}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000500)=""/68, 0x44}], 0x3, &(0x7f0000000580)=""/133, 0x85}, 0xfffffffe}, {{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000dc0)=""/52, 0x34}, {&(0x7f0000000740)=""/44, 0x2c}, {&(0x7f0000000780)=""/53, 0x35}], 0x4, &(0x7f0000000980)=""/51, 0x33}, 0x5}, {{&(0x7f00000009c0)=@un=@abs, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/205, 0xcd}], 0x1, &(0x7f0000000c40)=""/231, 0xe7}, 0x7}], 0x3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) unshare(0x8000000) r6 = mq_open(&(0x7f00000000c0), 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$pppoe(0x18, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 9.260286224s ago: executing program 3 (id=3553): r0 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x31) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x8829, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r8, @ANYBLOB="fdbf551b14ae46f9b563ef9178960adf1fe2669e03"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) writev(r9, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) 5.812839495s ago: executing program 3 (id=3555): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80000, 0x7e0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x200}, {0x6, 0xe, 0x8}, {0x0, 0x6, 0x6, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x2d}, 0x90) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000002000000000000000101000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7ff00001400020000000000010000008500100083f00000bf090000008e90e40501f1c9ec0000009500000000000000184800000300000000000000000000001812000061e3ed56bebe83a063cf2ce0aedefd6a83c2f40cd55e6b52295b0bbfe06610ec5865b89ae7249402ac43434e7d8dc1afc8ee27a63231851bada1e5c9956164d996dee5bc18a0451b118ac9afd881a4d5d785650216e80ef40b10138f31a3877e2685034b8926e8c5e9db6a9f1f716f1ee8e341be78931b8706dd9393ad3b3e46f9c109f31e0c21167f273b5ae778a0b7de668f58f45c947497aadde116f49ece6a3ec741cd23ed70759dbeeb13207864f710101333e6e02d30775e4c", @ANYRES64=r0, @ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x86, &(0x7f00000006c0)=""/134, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x5, 0x3, 0x5f3bb676}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x10, 0xff}, 0x90) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x0, &(0x7f0000000440)=0x399) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000010300000000000000000200000000000000000000001c4a620167739606e65f2b4164538c4f1299bda1bfde6413a1bf3545b752cc0b2254ed23708c782ce69d367d0522790ad82234f25870263b6c9ec748db2d030000005be6b95b13f81be1536ab8b2f3d8"], 0x1c}}, 0x0) ioctl$KDSETLED(r1, 0x4b45, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 3.835227276s ago: executing program 3 (id=3557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000200)=""/232, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010d2dbd7000fddbdf250100000008000100740000000c0099000700000014000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) r6 = eventfd2(0x200054, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) getgroups(0x3, &(0x7f0000000440)=[0x0, 0xee01, 0x0]) setregid(0x0, r7) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, &(0x7f0000000380)=0x28) 3.472817714s ago: executing program 1 (id=3558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000003ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r3, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="000002c9f9"], 0x9) lsm_get_self_attr(0x65, 0x0, &(0x7f0000002080), 0xaedd40117f92bb93) 3.298026702s ago: executing program 1 (id=3559): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) r1 = dup(r0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='btrfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c0001000100000000000000"], 0x20}}, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) 3.176253194s ago: executing program 1 (id=3560): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x1000, 0x5, 0x9, 0xb, "194f2f83c2e798c3584770116cddc8819592b1"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) lseek(r0, 0xffffffff, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x9e5b) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x8) socket(0x5, 0x0, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x181000, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 2.701804745s ago: executing program 3 (id=3561): socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d"], 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) mlockall(0x7) setresuid(0x0, 0xee01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETNOCSUM(r2, 0x400454dc, 0x1000000000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00002c8000/0x2000)=nil) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_open_dev$media(&(0x7f00000001c0), 0x3, 0x80) socket(0x1d, 0x2, 0x6) syz_usb_connect(0x0, 0x56, &(0x7f00000002c0)=ANY=[], 0x0) unshare(0x8040480) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.628371747s ago: executing program 1 (id=3562): r0 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x31) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x8829, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r8, @ANYBLOB="fdbf551b14ae46f9b563ef9178960adf1fe2669e03"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r9, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) 1.53006129s ago: executing program 0 (id=3340): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x393881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 452.235427ms ago: executing program 1 (id=3563): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1180}]}]}, 0x20}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000180)=0x1) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) 431.361914ms ago: executing program 3 (id=3564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000200)=""/232, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010d2dbd7000fddbdf250100000008000100740000000c0099000700000014000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) r6 = eventfd2(0x200054, 0x80000) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) getgroups(0x3, &(0x7f0000000440)=[0x0, 0xee01, 0x0]) setregid(0x0, r7) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, &(0x7f0000000380)=0x28) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 282.120612ms ago: executing program 1 (id=3565): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fdatasync(r0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000000)={0x1, 0x4, 0xd885, 0x6, 0x1e, 0x7fffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) splice(r1, 0x0, r6, 0x0, 0x80000001, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000339c8f5dfcf898a965472ddfcb847094350a269e1238a36020acaee6f819b9d8762118672b78ba4dbd63cfe0259c5e01c506a01701e8125499a6a69f65bc4c0b7d1003b71162f835752a07bd0708c4fe447a6babbd99470acf200cfea2fb0f824f9f685c678b92ac7418772bbc7a8b94a623cd0832e244a5f6", @ANYRES16=r7, @ANYBLOB="01000000000000000000050000000800020000000000"], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r9, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = io_uring_setup(0x7375, &(0x7f0000000100)) syz_open_dev$video(&(0x7f00000001c0), 0x5, 0x24c400) close(r11) readv(r10, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/55, 0x37}], 0x1) 0s ago: executing program 2 (id=3069): r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r8, 0x1001, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000140)='^', 0x1}]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000040)=r9) kernel console output (not intermixed with test programs): 00 00 [ 808.485639][T17223] RSP: 002b:00000000f56f65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 808.489076][T17223] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6620 [ 808.492446][T17223] RDX: 000000000000000f RSI: 00000000f73efff4 RDI: 0000000000000000 [ 808.495926][T17223] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 808.499176][T17223] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 808.502620][T17223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.506104][T17223] [ 808.605282][T17225] tipc: Started in network mode [ 808.607478][T17225] tipc: Node identity ac1414aa, cluster identity 4711 [ 808.612817][T17225] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.617749][T17225] tipc: Enabled bearer , priority 10 [ 808.620975][T15453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 808.629243][T15453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 808.633523][T15453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 808.637263][T15453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 808.640845][T15453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 808.644155][T15453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 808.761192][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.809962][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 808.882434][T17226] chnl_net:caif_netlink_parms(): no params data found [ 808.904587][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.034189][T17232] batman_adv: batadv0: Adding interface: netdevsim0 [ 809.037461][T17232] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.049636][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.054306][T17232] batman_adv: batadv0: Interface activated: netdevsim0 [ 809.073441][T17226] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.077372][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.084060][T17226] bridge_slave_0: entered allmulticast mode [ 809.088850][T17226] bridge_slave_0: entered promiscuous mode [ 809.103602][T17226] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.106664][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.109786][T17226] bridge_slave_1: entered allmulticast mode [ 809.113667][T17226] bridge_slave_1: entered promiscuous mode [ 809.140300][ T39] audit: type=1326 audit(1725562376.748:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.158667][ T39] audit: type=1326 audit(1725562376.748:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.188713][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.206326][T17226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.212295][ T39] audit: type=1326 audit(1725562376.748:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.225066][T17226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.256042][ T39] audit: type=1326 audit(1725562376.748:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.274036][ T39] audit: type=1326 audit(1725562376.748:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.307742][ T39] audit: type=1326 audit(1725562376.758:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.324301][ T39] audit: type=1326 audit(1725562376.758:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.328773][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.334127][ T39] audit: type=1326 audit(1725562376.758:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.357294][T17226] team0: Port device team_slave_0 added [ 809.362750][ T39] audit: type=1326 audit(1725562376.818:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.387356][T17226] team0: Port device team_slave_1 added [ 809.406812][ T39] audit: type=1326 audit(1725562376.818:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.1.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 809.476518][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.517257][T17226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.528540][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.549293][T17226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.555091][T17226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.557912][T17226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.570884][T17226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.610806][ T10] tipc: Node number set to 2886997162 [ 809.665014][T17226] hsr_slave_0: entered promiscuous mode [ 809.669071][T17226] hsr_slave_1: entered promiscuous mode [ 809.748960][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 810.032674][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 810.224298][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.444827][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.558692][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 810.564642][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.699093][T15453] Bluetooth: hci0: command tx timeout [ 810.705691][ T1102] bridge_slave_1: left allmulticast mode [ 810.708097][ T1102] bridge_slave_1: left promiscuous mode [ 810.714591][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.720903][ T1102] bridge_slave_0: left allmulticast mode [ 810.723498][ T1102] bridge_slave_0: left promiscuous mode [ 810.726017][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.270070][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.277660][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.284944][ T1102] bond0 (unregistering): Released all slaves [ 811.693627][T17258] FAULT_INJECTION: forcing a failure. [ 811.693627][T17258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.699249][T17258] CPU: 1 UID: 0 PID: 17258 Comm: syz.3.3416 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 811.703806][T17258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 811.708461][T17258] Call Trace: [ 811.710070][T17258] [ 811.711439][T17258] dump_stack_lvl+0x16c/0x1f0 [ 811.713610][T17258] should_fail_ex+0x497/0x5b0 [ 811.715845][T17258] _copy_from_user+0x30/0xf0 [ 811.718166][T17258] do_ipv6_setsockopt+0x99f/0x4800 [ 811.720445][T17258] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 811.722427][T17258] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 811.724713][T17258] ? __might_fault+0x13b/0x190 [ 811.726822][T17258] ? __pfx___lock_acquire+0x10/0x10 [ 811.729117][T17258] ? hlock_class+0x4e/0x130 [ 811.730949][T17258] ? __lock_acquire+0xbdd/0x3cb0 [ 811.733078][T17258] ? __pfx___might_resched+0x10/0x10 [ 811.735394][T17258] ? __pfx___lock_acquire+0x10/0x10 [ 811.737710][T17258] ? __pfx_lock_release+0x10/0x10 [ 811.739842][T17258] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 811.742260][T17258] ? aa_sk_perm+0x2f5/0xb20 [ 811.744148][T17258] ? ipv6_setsockopt+0xe3/0x1a0 [ 811.746018][T17258] ipv6_setsockopt+0xe3/0x1a0 [ 811.747625][T17258] tcp_setsockopt+0xa4/0x100 [ 811.749409][T17258] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 811.751217][T17258] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 811.753727][T17258] do_sock_setsockopt+0x222/0x480 [ 811.755905][T17258] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 811.758701][T17258] ? __fget_light+0x173/0x210 [ 811.760958][T17258] __sys_setsockopt+0x1a4/0x270 [ 811.763210][T17258] ? __pfx___sys_setsockopt+0x10/0x10 [ 811.765864][T17258] ? fput+0x32/0x390 [ 811.767595][T17258] ? ksys_write+0x1ab/0x260 [ 811.769564][T17258] ? __pfx_ksys_write+0x10/0x10 [ 811.771764][T17258] __ia32_sys_setsockopt+0xbc/0x160 [ 811.774227][T17258] ? lockdep_hardirqs_on+0x7c/0x110 [ 811.776434][T17258] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 811.779547][T17258] __do_fast_syscall_32+0x73/0x120 [ 811.781811][T17258] do_fast_syscall_32+0x32/0x80 [ 811.783968][T17258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.786773][T17258] RIP: 0023:0xf7fc4579 [ 811.788395][T17258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 811.795257][T17258] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 811.798662][T17258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 811.801539][T17258] RDX: 0000000000000040 RSI: 0000000020000600 RDI: 0000000000000358 [ 811.804246][T17258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.807385][T17258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 811.811112][T17258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.814252][T17258] [ 811.940451][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.949011][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.957113][ T5354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.988020][ T5354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.001838][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 812.022435][ T5354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 812.042015][ T1102] hsr_slave_0: left promiscuous mode [ 812.072714][T17265] FAULT_INJECTION: forcing a failure. [ 812.072714][T17265] name failslab, interval 1, probability 0, space 0, times 0 [ 812.078380][T17265] CPU: 1 UID: 0 PID: 17265 Comm: syz.3.3418 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 812.079691][ T1102] hsr_slave_1: left promiscuous mode [ 812.083825][T17265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 812.091977][T17265] Call Trace: [ 812.093413][T17265] [ 812.094794][T17265] dump_stack_lvl+0x16c/0x1f0 [ 812.096712][T17265] should_fail_ex+0x497/0x5b0 [ 812.098412][T17265] ? fs_reclaim_acquire+0xae/0x160 [ 812.101027][T17265] should_failslab+0xc2/0x120 [ 812.103156][T17265] __kmalloc_noprof+0xcb/0x410 [ 812.105050][T17265] ? __pfx_lock_acquire+0x10/0x10 [ 812.107119][T17265] tomoyo_realpath_from_path+0xbf/0x710 [ 812.109970][T17265] ? tomoyo_profile+0x47/0x60 [ 812.112051][T17265] tomoyo_path_number_perm+0x245/0x5b0 [ 812.114534][T17265] ? tomoyo_path_number_perm+0x232/0x5b0 [ 812.117155][T17265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 812.120020][T17265] ? __pfx_lock_release+0x10/0x10 [ 812.122712][T17265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.125174][T17265] ? __fget_files+0x256/0x400 [ 812.127310][T17265] security_file_ioctl_compat+0x75/0xc0 [ 812.130267][T17265] __do_compat_sys_ioctl+0x5d/0x330 [ 812.132842][T17265] __do_fast_syscall_32+0x73/0x120 [ 812.136308][T17265] do_fast_syscall_32+0x32/0x80 [ 812.140655][T17265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.143951][T17265] RIP: 0023:0xf7fc4579 [ 812.146030][T17265] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 812.155447][T17265] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 812.159831][T17265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007b1 [ 812.163128][T17265] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 812.166796][T17265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.170147][T17265] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 812.173591][T17265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.177439][T17265] [ 812.179617][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.180416][T17265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 812.182796][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.192400][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.196507][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.268141][ T1102] veth1_macvtap: left promiscuous mode [ 812.270859][ T1102] veth0_macvtap: left promiscuous mode [ 812.274134][ T1102] veth1_vlan: left promiscuous mode [ 812.276618][ T1102] veth0_vlan: left promiscuous mode [ 812.324901][T17270] FAULT_INJECTION: forcing a failure. [ 812.324901][T17270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.331808][T17270] CPU: 2 UID: 0 PID: 17270 Comm: syz.3.3420 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 812.336770][T17270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 812.342034][T17270] Call Trace: [ 812.343565][T17270] [ 812.345011][T17270] dump_stack_lvl+0x16c/0x1f0 [ 812.347266][T17270] should_fail_ex+0x497/0x5b0 [ 812.349507][T17270] _copy_from_user+0x30/0xf0 [ 812.351799][T17270] get_compat_msghdr+0xa8/0x170 [ 812.354247][T17270] ? __pfx_get_compat_msghdr+0x10/0x10 [ 812.356789][T17270] ? __pfx___lock_acquire+0x10/0x10 [ 812.359137][T17270] ___sys_sendmsg+0x1b0/0x1e0 [ 812.361274][T17270] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.363798][T17270] ? ksys_write+0x21c/0x260 [ 812.366048][T17270] ? __fget_light+0x173/0x210 [ 812.368258][T17270] __sys_sendmsg+0x117/0x1f0 [ 812.370449][T17270] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.373161][T17270] __do_fast_syscall_32+0x73/0x120 [ 812.375872][T17270] do_fast_syscall_32+0x32/0x80 [ 812.378528][T17270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.381718][T17270] RIP: 0023:0xf7fc4579 [ 812.383657][T17270] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 812.392428][T17270] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 812.396247][T17270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 812.399951][T17270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 812.403639][T17270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.407386][T17270] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 812.411321][T17270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.414931][T17270] [ 812.768725][ T5354] Bluetooth: hci0: command tx timeout [ 813.648707][ C0] net_ratelimit: 2 callbacks suppressed [ 813.648723][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 813.972138][ T1369] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.975109][ T1369] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.143703][ T5354] Bluetooth: hci1: command tx timeout [ 814.351053][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 814.537266][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 814.698679][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 814.848693][ T5354] Bluetooth: hci0: command tx timeout [ 815.738705][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.133757][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 816.211206][ T5354] Bluetooth: hci1: command tx timeout [ 816.360768][T17226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 816.395301][T17226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 816.416026][T17226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 816.433964][T17226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 816.467756][T17261] chnl_net:caif_netlink_parms(): no params data found [ 816.778789][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.938755][ T5354] Bluetooth: hci0: command tx timeout [ 817.109086][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.112071][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.115173][T17261] bridge_slave_0: entered allmulticast mode [ 817.122305][T17261] bridge_slave_0: entered promiscuous mode [ 817.140921][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.144659][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.148306][T17261] bridge_slave_1: entered allmulticast mode [ 817.160491][T17261] bridge_slave_1: entered promiscuous mode [ 817.380786][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.394605][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.585993][T17313] tipc: Started in network mode [ 817.588772][T17313] tipc: Node identity ac1414aa, cluster identity 4711 [ 817.592588][T17313] tipc: Enabled bearer , priority 10 [ 817.615739][T17261] team0: Port device team_slave_0 added [ 817.628346][T17261] team0: Port device team_slave_1 added [ 817.768221][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.828662][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 817.906924][T17317] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3427'. [ 818.040360][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.084980][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.094995][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.124007][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.150496][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.153453][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.178539][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.316559][ T5354] Bluetooth: hci1: command tx timeout [ 818.414744][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.628935][T17261] hsr_slave_0: entered promiscuous mode [ 818.642906][T17261] hsr_slave_1: entered promiscuous mode [ 818.648992][T17261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.652567][T17261] Cannot create hsr debugfs directory [ 818.686617][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.718998][ T58] tipc: Node number set to 2886997162 [ 818.792120][T17226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.848724][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 818.851752][T17226] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.957216][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.960626][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.971567][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.974923][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.143120][ T1102] bridge_slave_1: left allmulticast mode [ 819.145783][ T1102] bridge_slave_1: left promiscuous mode [ 819.153256][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.186113][ T1102] bridge_slave_0: left allmulticast mode [ 819.194524][ T1102] bridge_slave_0: left promiscuous mode [ 819.199773][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.818826][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.829488][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.836373][ T1102] bond0 (unregistering): Released all slaves [ 819.846614][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 819.898642][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 820.379808][ T5354] Bluetooth: hci1: command tx timeout [ 820.431646][ T1102] hsr_slave_0: left promiscuous mode [ 820.440230][ T1102] hsr_slave_1: left promiscuous mode [ 820.460303][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.462999][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.483950][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.487293][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.573815][ T1102] veth1_macvtap: left promiscuous mode [ 820.576396][ T1102] veth0_macvtap: left promiscuous mode [ 820.579426][ T1102] veth1_vlan: left promiscuous mode [ 820.581828][ T1102] veth0_vlan: left promiscuous mode [ 820.939007][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 821.970532][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 822.612070][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 822.776729][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 823.016557][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 824.048719][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 824.450501][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 824.463563][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3435'. [ 824.612514][T17226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.640129][T17364] netlink: 'syz.1.3436': attribute type 2 has an invalid length. [ 824.644295][T17364] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 824.748344][T17226] veth0_vlan: entered promiscuous mode [ 824.783884][T17226] veth1_vlan: entered promiscuous mode [ 824.864170][T17261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 824.904462][T17261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 824.922277][T17261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 824.941396][T17226] veth0_macvtap: entered promiscuous mode [ 824.944971][T17261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 824.960346][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 824.960359][ T39] audit: type=1326 audit(1725562392.578:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17369 comm="syz.1.3438" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 825.003343][T17226] veth1_macvtap: entered promiscuous mode [ 825.088738][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 825.088918][T17226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.124259][T17226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.150574][T17226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.154396][T17226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.158372][T17226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.163064][T17226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.333058][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.335725][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.376702][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.381895][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.385540][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.440911][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.456710][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.460199][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.530449][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.533259][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.853170][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.936351][T17261] veth0_vlan: entered promiscuous mode [ 825.951265][T17261] veth1_vlan: entered promiscuous mode [ 825.989070][T17261] veth0_macvtap: entered promiscuous mode [ 825.996020][T17261] veth1_macvtap: entered promiscuous mode [ 826.014834][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.025790][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.035511][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.063030][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.068629][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.074436][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.091210][T17261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.094931][T17261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.101799][T17261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.105624][T17261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.132354][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 826.239148][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.242506][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.288075][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.292533][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.911244][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.011694][T17396] netlink: 'syz.1.3441': attribute type 8 has an invalid length. [ 827.015276][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 827.168861][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 827.679779][T15453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 827.685547][T15453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 827.691387][T15453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 827.695551][T15453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 827.700883][T15453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 827.704201][T15453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.888989][T17407] chnl_net:caif_netlink_parms(): no params data found [ 828.122585][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.125900][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.129194][T17407] bridge_slave_0: entered allmulticast mode [ 828.132582][T17407] bridge_slave_0: entered promiscuous mode [ 828.140627][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.144498][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.147886][T17407] bridge_slave_1: entered allmulticast mode [ 828.152291][T17407] bridge_slave_1: entered promiscuous mode [ 828.209339][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.254286][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.276313][T17407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.286794][T17407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.389339][T17407] team0: Port device team_slave_0 added [ 828.399902][T17407] team0: Port device team_slave_1 added [ 828.434025][T17419] syzkaller0: entered promiscuous mode [ 828.436381][T17419] syzkaller0: entered allmulticast mode [ 828.475106][T17407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.478446][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.490187][T17407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.541536][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.550999][T17407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.554015][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.566245][T17407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.690549][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.717921][T17407] hsr_slave_0: entered promiscuous mode [ 828.734795][T17407] hsr_slave_1: entered promiscuous mode [ 828.754943][T17407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.758749][T17407] Cannot create hsr debugfs directory [ 828.961058][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3447'. [ 829.248727][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 829.253512][ T75] bridge_slave_1: left allmulticast mode [ 829.256230][ T75] bridge_slave_1: left promiscuous mode [ 829.260515][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.266267][ T75] bridge_slave_0: left allmulticast mode [ 829.268852][ T75] bridge_slave_0: left promiscuous mode [ 829.276004][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.742938][ T5354] Bluetooth: hci0: command tx timeout [ 829.874640][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.910080][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.919498][ T75] bond0 (unregistering): Released all slaves [ 830.298643][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 830.491190][T15453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 830.498621][T15453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 830.503647][T15453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 830.513738][T15453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 830.525559][T15453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 830.539755][T15453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.636378][ T75] hsr_slave_0: left promiscuous mode [ 830.643195][ T75] hsr_slave_1: left promiscuous mode [ 830.656886][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.660524][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.666213][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.682905][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.768086][ T75] veth1_macvtap: left promiscuous mode [ 830.772767][ T75] veth0_macvtap: left promiscuous mode [ 830.775128][ T75] veth1_vlan: left promiscuous mode [ 830.795072][ T75] veth0_vlan: left promiscuous mode [ 831.334946][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 831.589306][ T39] audit: type=1326 audit(1725562399.208:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17449 comm="syz.1.3450" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 831.819282][T15453] Bluetooth: hci0: command tx timeout [ 832.098902][T17454] netlink: 'syz.3.3451': attribute type 1 has an invalid length. [ 832.102034][T17454] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3451'. [ 832.379141][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 832.623273][T15453] Bluetooth: hci1: command tx timeout [ 832.637630][ T75] team0 (unregistering): Port device team_slave_1 removed [ 832.775347][ T75] team0 (unregistering): Port device team_slave_0 removed [ 833.413087][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 833.898732][T15453] Bluetooth: hci0: command tx timeout [ 834.112927][T17465] FAULT_INJECTION: forcing a failure. [ 834.112927][T17465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.121473][T17465] CPU: 0 UID: 0 PID: 17465 Comm: syz.3.3453 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 834.126605][T17465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 834.134189][T17465] Call Trace: [ 834.135474][T17465] [ 834.136669][T17465] dump_stack_lvl+0x16c/0x1f0 [ 834.138550][T17465] should_fail_ex+0x497/0x5b0 [ 834.140722][T17465] _copy_to_user+0x30/0xc0 [ 834.142585][T17465] simple_read_from_buffer+0xd0/0x160 [ 834.144633][T17465] proc_fail_nth_read+0x19e/0x280 [ 834.146688][T17465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.148970][T17465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.151358][T17465] vfs_read+0x1d4/0xbd0 [ 834.153469][T17465] ? __fdget_pos+0xeb/0x180 [ 834.155480][T17465] ? __pfx_vfs_read+0x10/0x10 [ 834.157326][T17465] ? __pfx___mutex_lock+0x10/0x10 [ 834.159044][T17465] ? __fget_files+0x256/0x400 [ 834.160665][T17465] ksys_read+0x12f/0x260 [ 834.162085][T17465] ? __pfx_ksys_read+0x10/0x10 [ 834.163714][T17465] __do_fast_syscall_32+0x73/0x120 [ 834.165470][T17465] do_fast_syscall_32+0x32/0x80 [ 834.167101][T17465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.169528][T17465] RIP: 0023:0xf7fc4579 [ 834.171058][T17465] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 834.178045][T17465] RSP: 002b:00000000f57565a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 834.181122][T17465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5756620 [ 834.184064][T17465] RDX: 000000000000000f RSI: 00000000f744fff4 RDI: 0000000000000000 [ 834.186895][T17465] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 834.189964][T17465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 834.192910][T17465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.195836][T17465] [ 834.241710][T17407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 834.259251][T17407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 834.314789][T17407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 834.336784][T17407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 834.399570][T17467] FAULT_INJECTION: forcing a failure. [ 834.399570][T17467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.405194][T17467] CPU: 3 UID: 0 PID: 17467 Comm: syz.1.3454 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 834.411250][T17467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 834.416038][T17467] Call Trace: [ 834.417414][T17467] [ 834.418606][T17467] dump_stack_lvl+0x16c/0x1f0 [ 834.420673][T17467] should_fail_ex+0x497/0x5b0 [ 834.422683][T17467] _copy_to_user+0x30/0xc0 [ 834.424580][T17467] rng_dev_read+0x24b/0x730 [ 834.426560][T17467] ? __pfx_rng_dev_read+0x10/0x10 [ 834.429090][T17467] ? bpf_lsm_file_permission+0x9/0x10 [ 834.431466][T17467] ? security_file_permission+0x98/0xc0 [ 834.433761][T17467] ? __pfx_rng_dev_read+0x10/0x10 [ 834.436027][T17467] vfs_readv+0x6cb/0x8a0 [ 834.437989][T17467] ? __pfx_vfs_readv+0x10/0x10 [ 834.440141][T17467] ? find_held_lock+0x2d/0x110 [ 834.443194][T17467] ? __pfx_lock_release+0x10/0x10 [ 834.448083][T17467] ? do_preadv+0x1b2/0x260 [ 834.450114][T17467] do_preadv+0x1b2/0x260 [ 834.452446][T17467] ? __pfx_do_preadv+0x10/0x10 [ 834.455426][T17467] ? syscall_user_dispatch+0x77/0x140 [ 834.458075][T17467] __do_fast_syscall_32+0x73/0x120 [ 834.459373][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 834.460924][T17467] do_fast_syscall_32+0x32/0x80 [ 834.465088][T17436] chnl_net:caif_netlink_parms(): no params data found [ 834.465721][T17467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.473020][T17467] RIP: 0023:0xf73fe579 [ 834.474868][T17467] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 834.482979][T17467] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 834.486273][T17467] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 834.489865][T17467] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 834.492901][T17467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.496871][T17467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 834.499667][T17467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.502911][T17467] [ 834.557758][T17467] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 834.561644][T17467] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3454'. [ 834.698793][T15453] Bluetooth: hci1: command tx timeout [ 834.780645][T17436] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.783799][T17436] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.786967][T17436] bridge_slave_0: entered allmulticast mode [ 834.791462][T17436] bridge_slave_0: entered promiscuous mode [ 834.799321][T17436] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.802238][T17436] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.804924][T17436] bridge_slave_1: entered allmulticast mode [ 834.808014][T17436] bridge_slave_1: entered promiscuous mode [ 834.870835][T17436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.907316][T17436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.063919][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.129786][T17436] team0: Port device team_slave_0 added [ 835.158793][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.170598][T17436] team0: Port device team_slave_1 added [ 835.260251][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.287162][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.449322][T17436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.452437][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.464341][T17436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.471942][T17436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.474953][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.485459][T17436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.489855][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 835.540580][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.878284][T17407] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.972401][T15453] Bluetooth: hci0: command tx timeout [ 835.993020][ T39] audit: type=1804 audit(1725562403.368:592): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3459" name="/newroot/608/bus/file0" dev="overlay" ino=3369 res=1 errno=0 [ 836.012908][T17436] hsr_slave_0: entered promiscuous mode [ 836.020121][T17436] hsr_slave_1: entered promiscuous mode [ 836.121215][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.124441][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.145775][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.148936][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.424435][ T75] bridge_slave_1: left allmulticast mode [ 836.426671][ T75] bridge_slave_1: left promiscuous mode [ 836.439940][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.464678][ T75] bridge_slave_0: left allmulticast mode [ 836.466673][ T75] bridge_slave_0: left promiscuous mode [ 836.478985][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.531657][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 836.768783][T15453] Bluetooth: hci1: command tx timeout [ 837.059489][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.066701][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.074660][ T75] bond0 (unregistering): Released all slaves [ 837.503294][T17528] overlayfs: overlapping lowerdir path [ 837.574598][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 837.678452][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.701290][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.714048][ T75] hsr_slave_0: left promiscuous mode [ 837.720846][ T75] hsr_slave_1: left promiscuous mode [ 837.726526][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.733346][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.772323][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.775828][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.853497][ T75] veth1_macvtap: left promiscuous mode [ 837.857913][ T75] veth0_macvtap: left promiscuous mode [ 837.862533][ T75] veth1_vlan: left promiscuous mode [ 837.864922][ T75] veth0_vlan: left promiscuous mode [ 838.618658][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 838.848740][T15453] Bluetooth: hci1: command tx timeout [ 839.380679][ T75] team0 (unregistering): Port device team_slave_1 removed [ 839.548707][ T75] team0 (unregistering): Port device team_slave_0 removed [ 839.616066][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.658757][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 840.692224][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 840.951533][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.202109][T17407] veth0_vlan: entered promiscuous mode [ 841.213298][T17407] veth1_vlan: entered promiscuous mode [ 841.242902][T17407] veth0_macvtap: entered promiscuous mode [ 841.253591][T17407] veth1_macvtap: entered promiscuous mode [ 841.409784][T17407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.417146][T17407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.458904][T17407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.462351][T17407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.476093][T17407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.481668][T17407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.674124][T17436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 841.721649][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.724154][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.728900][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 841.790713][T17436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 841.809417][T17436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 841.833850][T17436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 841.866199][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.872734][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.910649][ T39] audit: type=1326 audit(1725562409.518:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17565 comm="syz.1.3471" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 841.990326][T17436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.102943][T17436] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.123410][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.126519][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.168136][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.171378][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.256229][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 842.311054][T17436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 842.665710][T17436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.771454][T17582] netlink: set zone limit has 4 unknown bytes [ 842.778654][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 842.778820][T17436] veth0_vlan: entered promiscuous mode [ 842.802899][T17436] veth1_vlan: entered promiscuous mode [ 842.894861][T17436] veth0_macvtap: entered promiscuous mode [ 842.947204][T17436] veth1_macvtap: entered promiscuous mode [ 843.015260][ T39] audit: type=1326 audit(1725562410.628:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17583 comm="syz.3.3474" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x0 [ 843.120883][T17436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.126717][T17436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.137542][T17436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.153699][T17436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.160121][T17436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.168111][T17436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.198877][T17436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.203334][T17436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.222743][T17436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.227708][T17436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.433590][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.459166][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.493481][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.498288][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.818883][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 843.944684][ T1199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.641092][ T39] audit: type=1326 audit(1725562412.258:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17595 comm="syz.3.3476" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x0 [ 844.717067][ T5354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.724535][ T5354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.730493][ T5354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.740525][ T5354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.744896][ T5354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 844.747639][ T5354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 844.848930][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 845.066072][T17598] chnl_net:caif_netlink_parms(): no params data found [ 845.157161][ T1199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.265977][ T39] audit: type=1326 audit(1725562412.878:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17613 comm="syz.1.3479" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 845.293869][ T1199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.311375][T17598] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.314725][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.318354][T17598] bridge_slave_0: entered allmulticast mode [ 845.323487][T17598] bridge_slave_0: entered promiscuous mode [ 845.328543][T17598] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.331838][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.335275][T17598] bridge_slave_1: entered allmulticast mode [ 845.340250][T17598] bridge_slave_1: entered promiscuous mode [ 845.487256][ T1199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.505781][T17598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.519681][T17598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.646137][T17598] team0: Port device team_slave_0 added [ 845.653172][T17598] team0: Port device team_slave_1 added [ 845.727184][T17598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.731287][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.746027][T17598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.759791][T17598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.762843][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.774906][T17598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.892234][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 845.906305][T17622] wg2: left allmulticast mode [ 845.928354][T17598] hsr_slave_0: entered promiscuous mode [ 845.939467][T17598] hsr_slave_1: entered promiscuous mode [ 845.942404][T17598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.945533][T17598] Cannot create hsr debugfs directory [ 845.953117][T17622] wg2: entered promiscuous mode [ 845.955006][T17622] wg2: entered allmulticast mode [ 846.095387][ T1199] bridge_slave_1: left allmulticast mode [ 846.097962][ T1199] bridge_slave_1: left promiscuous mode [ 846.100818][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.110275][ T1199] bridge_slave_0: left allmulticast mode [ 846.112926][ T1199] bridge_slave_0: left promiscuous mode [ 846.115645][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.626966][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.637211][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.644930][ T1199] bond0 (unregistering): Released all slaves [ 846.769160][T15453] Bluetooth: hci0: command tx timeout [ 846.938988][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 847.122384][ T1199] hsr_slave_0: left promiscuous mode [ 847.126855][ T1199] hsr_slave_1: left promiscuous mode [ 847.130753][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.134071][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.139196][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.142310][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.190972][ T1199] veth1_macvtap: left promiscuous mode [ 847.193679][ T1199] veth0_macvtap: left promiscuous mode [ 847.196586][ T1199] veth1_vlan: left promiscuous mode [ 847.199132][ T1199] veth0_vlan: left promiscuous mode [ 847.795232][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 847.805331][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 847.838391][ T5354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.852137][ T5354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.863506][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 847.868094][ T5354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.978668][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 848.851304][T15453] Bluetooth: hci0: command tx timeout [ 849.008724][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 849.251855][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 849.412938][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 849.970388][T15453] Bluetooth: hci1: command tx timeout [ 850.058782][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 850.669536][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.928969][T15453] Bluetooth: hci0: command tx timeout [ 851.088851][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 851.286797][T17636] chnl_net:caif_netlink_parms(): no params data found [ 851.513141][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.517927][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.523692][T17636] bridge_slave_0: entered allmulticast mode [ 851.528461][T17636] bridge_slave_0: entered promiscuous mode [ 851.529078][T16994] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 851.537835][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.550986][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.554212][T17636] bridge_slave_1: entered allmulticast mode [ 851.558013][T17636] bridge_slave_1: entered promiscuous mode [ 851.712583][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.772595][T16994] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 851.777914][T16994] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 851.793834][T16994] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 851.804555][T16994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.818033][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.822243][T17671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 851.841127][T16994] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.859547][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.990890][T17598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 852.013741][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 852.048808][T15453] Bluetooth: hci1: command tx timeout [ 852.106349][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.138758][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 852.178302][ T39] audit: type=1326 audit(1725562419.788:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.199686][ T39] audit: type=1326 audit(1725562419.788:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.206571][ T983] usb 6-1: USB disconnect, device number 75 [ 852.217115][ T39] audit: type=1326 audit(1725562419.808:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.244846][ T39] audit: type=1326 audit(1725562419.818:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.264117][T17636] team0: Port device team_slave_0 added [ 852.267141][ T39] audit: type=1326 audit(1725562419.818:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.280715][T17598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 852.285384][ T39] audit: type=1326 audit(1725562419.818:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.301510][T17598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 852.305338][ T39] audit: type=1326 audit(1725562419.818:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.324763][T17689] batman_adv: batadv2: Adding interface: netdevsim0 [ 852.328403][T17689] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.349856][ T39] audit: type=1326 audit(1725562419.818:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.350884][T17689] batman_adv: batadv2: Interface activated: netdevsim0 [ 852.361082][ T39] audit: type=1326 audit(1725562419.818:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.372989][ T39] audit: type=1326 audit(1725562419.818:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.3.3489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 852.417285][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.441502][T17636] team0: Port device team_slave_1 added [ 852.446279][T17598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 852.643745][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.662875][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.682047][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.692860][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.728604][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.731565][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.767060][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.945952][T17636] hsr_slave_0: entered promiscuous mode [ 852.959878][T17636] hsr_slave_1: entered promiscuous mode [ 852.963927][T17636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.967211][T17636] Cannot create hsr debugfs directory [ 853.008635][T15453] Bluetooth: hci0: command tx timeout [ 853.168659][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 853.246613][ T1199] bridge_slave_1: left allmulticast mode [ 853.249868][ T1199] bridge_slave_1: left promiscuous mode [ 853.252512][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.258484][ T1199] bridge_slave_0: left allmulticast mode [ 853.265802][ T1199] bridge_slave_0: left promiscuous mode [ 853.270943][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.583909][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.031816][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.046842][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.056518][ T1199] bond0 (unregistering): Released all slaves [ 854.114574][T17598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.130247][T15453] Bluetooth: hci1: command tx timeout [ 854.218651][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 854.394735][T17598] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.452526][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.455716][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.581011][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.583959][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.041247][ T1199] hsr_slave_0: left promiscuous mode [ 855.045311][ T1199] hsr_slave_1: left promiscuous mode [ 855.052191][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.055236][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.085942][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.089226][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.179191][ T1199] veth1_macvtap: left promiscuous mode [ 855.182630][ T1199] veth0_macvtap: left promiscuous mode [ 855.185297][ T1199] veth1_vlan: left promiscuous mode [ 855.187724][ T1199] veth0_vlan: left promiscuous mode [ 855.248725][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 856.212273][T15453] Bluetooth: hci1: command tx timeout [ 856.298669][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 856.319974][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.504025][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.954743][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 857.117749][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 857.329109][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 858.368717][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 858.561327][T17598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.629355][T17713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 858.632095][T17713] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 858.677344][T17636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 858.719140][T17636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 858.726829][T17636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 858.774007][T17713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 858.777042][T17713] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 858.792880][T17636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 858.997219][T17598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.024111][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.092593][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.169968][T17598] veth0_vlan: entered promiscuous mode [ 859.182398][T17598] veth1_vlan: entered promiscuous mode [ 859.193462][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.197196][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.273644][T17598] veth0_macvtap: entered promiscuous mode [ 859.313290][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.316676][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.322324][T17728] netlink: 'syz.1.3494': attribute type 1 has an invalid length. [ 859.325750][T17728] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3494'. [ 859.329667][T17598] veth1_macvtap: entered promiscuous mode [ 859.401669][T17598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.409021][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 859.421187][T17598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.440620][T17598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.444421][T17598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.448209][T17598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.455438][T17598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.468015][T17636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 859.641171][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.645228][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.686579][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.696279][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.769384][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.970040][T17636] veth0_vlan: entered promiscuous mode [ 859.980437][T17636] veth1_vlan: entered promiscuous mode [ 860.062754][T17636] veth0_macvtap: entered promiscuous mode [ 860.119306][T17636] veth1_macvtap: entered promiscuous mode [ 860.155786][T17636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.180482][T17636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.186862][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.235251][T17636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.248678][T17636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.256660][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.323564][T17636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.327108][T17636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.331400][T17636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.335053][T17636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.449957][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 860.496311][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.499572][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.527805][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.535488][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.214528][T17757] netlink: 'syz.3.3499': attribute type 1 has an invalid length. [ 861.245509][T17757] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 861.251315][T17757] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 861.488872][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 861.805914][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.498107][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.535997][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 862.547829][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.795557][ T5354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 862.803529][ T5354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 862.807799][ T5354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 862.817867][ T5354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 862.825079][ T5354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 862.831730][ T5354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 863.017495][T17768] chnl_net:caif_netlink_parms(): no params data found [ 863.165538][T17768] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.169549][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.172901][T17768] bridge_slave_0: entered allmulticast mode [ 863.176932][T17768] bridge_slave_0: entered promiscuous mode [ 863.182046][T17768] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.185999][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.189266][T17768] bridge_slave_1: entered allmulticast mode [ 863.192943][T17768] bridge_slave_1: entered promiscuous mode [ 863.258086][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.315727][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.324055][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.408440][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.568675][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 863.575957][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.597483][T17768] team0: Port device team_slave_0 added [ 863.604368][T17768] team0: Port device team_slave_1 added [ 863.689455][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.693232][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.705330][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.712259][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.715291][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.728813][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.889224][T17768] hsr_slave_0: entered promiscuous mode [ 863.904620][T17768] hsr_slave_1: entered promiscuous mode [ 863.994185][ T64] bridge_slave_1: left allmulticast mode [ 863.996699][ T64] bridge_slave_1: left promiscuous mode [ 863.999760][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.006308][ T64] bridge_slave_0: left allmulticast mode [ 864.018629][ T64] bridge_slave_0: left promiscuous mode [ 864.020761][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.560530][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.584457][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.592839][ T64] bond0 (unregistering): Released all slaves [ 864.608769][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 864.934853][ T5354] Bluetooth: hci0: command tx timeout [ 865.172212][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'. [ 865.253897][T15453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 865.281016][T15453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 865.296507][T15453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 865.319588][T15453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 865.351302][T15453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 865.355337][T15453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 865.416730][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 865.416747][ T39] audit: type=1326 audit(1725562433.018:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.443043][ T39] audit: type=1326 audit(1725562433.018:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.479323][ T39] audit: type=1326 audit(1725562433.018:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.512067][ T39] audit: type=1326 audit(1725562433.018:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.539457][ T39] audit: type=1326 audit(1725562433.018:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.555274][T17800] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 865.559113][T17800] batman_adv: batadv0: Removing interface: netdevsim0 [ 865.585984][T17800] batman_adv: batadv1: Adding interface: netdevsim0 [ 865.600372][T17800] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.603852][ T39] audit: type=1326 audit(1725562433.018:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.648698][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 865.652975][T17800] batman_adv: batadv1: Interface activated: netdevsim0 [ 865.659421][ T39] audit: type=1326 audit(1725562433.028:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.699734][ T39] audit: type=1326 audit(1725562433.028:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.740071][ T39] audit: type=1326 audit(1725562433.028:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.770387][ T39] audit: type=1326 audit(1725562433.028:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.1.3505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 865.953039][ T64] hsr_slave_0: left promiscuous mode [ 865.988817][ T64] hsr_slave_1: left promiscuous mode [ 866.009964][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.036247][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.072980][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.076214][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.188425][ T64] veth1_macvtap: left promiscuous mode [ 866.191077][ T64] veth0_macvtap: left promiscuous mode [ 866.194012][ T64] veth1_vlan: left promiscuous mode [ 866.196659][ T64] veth0_vlan: left promiscuous mode [ 866.688730][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 867.013714][T15453] Bluetooth: hci0: command tx timeout [ 867.359717][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.416142][T15453] Bluetooth: hci1: command tx timeout [ 867.738720][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 868.272312][ T64] team0 (unregistering): Port device team_slave_1 removed [ 868.451883][ T64] team0 (unregistering): Port device team_slave_0 removed [ 868.768797][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 869.088789][T15453] Bluetooth: hci0: command tx timeout [ 869.489026][T15453] Bluetooth: hci1: command tx timeout [ 869.808984][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 869.826870][T17823] wg2: left promiscuous mode [ 869.829204][T17823] wg2: left allmulticast mode [ 870.047665][T17840] FAULT_INJECTION: forcing a failure. [ 870.047665][T17840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.068003][T17840] CPU: 1 UID: 0 PID: 17840 Comm: syz.3.3512 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 870.073211][T17840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 870.078277][T17840] Call Trace: [ 870.079916][T17840] [ 870.081493][T17840] dump_stack_lvl+0x16c/0x1f0 [ 870.084117][T17840] should_fail_ex+0x497/0x5b0 [ 870.086584][T17840] _copy_to_user+0x30/0xc0 [ 870.088699][T17840] __copy_siginfo_to_user32+0x97/0xf0 [ 870.091164][T17840] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 870.094205][T17840] ? _raw_spin_unlock_irq+0x23/0x50 [ 870.096695][T17840] ? siginfo_layout+0x177/0x290 [ 870.098978][T17840] ia32_setup_rt_frame+0x6c3/0xb20 [ 870.101348][T17840] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 870.103983][T17840] arch_do_signal_or_restart+0x47b/0x7e0 [ 870.106717][T17840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 870.109287][T17840] ? __do_sys_fsconfig+0x147/0xbe0 [ 870.111658][T17840] syscall_exit_to_user_mode+0x150/0x2a0 [ 870.114667][T17840] __do_fast_syscall_32+0x80/0x120 [ 870.117472][T17840] do_fast_syscall_32+0x32/0x80 [ 870.119568][T17840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 870.123350][T17840] RIP: 0023:0xf7fc4579 [ 870.125595][T17840] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 870.134795][T17840] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 00000000000001af [ 870.138411][T17840] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 0000000000000002 [ 870.142112][T17840] RDX: 0000000020000040 RSI: 0000000020000140 RDI: 0000000000000004 [ 870.145592][T17840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 870.148992][T17840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 870.152627][T17840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 870.156234][T17840] [ 870.157748][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.267877][T17803] chnl_net:caif_netlink_parms(): no params data found [ 870.325214][T17768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.358983][T14863] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 870.404356][T17768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.435328][T17768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.447794][T17768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 870.549402][T14863] usb 6-1: Using ep0 maxpacket: 32 [ 870.555672][T17803] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.557838][T14863] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 870.559402][T17803] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.564121][T14863] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 870.567510][T17803] bridge_slave_0: entered allmulticast mode [ 870.572798][T14863] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 870.572823][T14863] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 870.572842][T14863] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 870.572864][T14863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 870.576356][T14863] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 870.581910][T17803] bridge_slave_0: entered promiscuous mode [ 870.583496][T14863] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 870.593534][T17803] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.595471][T14863] usb 6-1: Product: syz [ 870.598301][T17803] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.601208][T14863] usb 6-1: Manufacturer: syz [ 870.604694][T17803] bridge_slave_1: entered allmulticast mode [ 870.607831][T14863] usb 6-1: SerialNumber: syz [ 870.610859][T17803] bridge_slave_1: entered promiscuous mode [ 870.617287][T14863] usb 6-1: config 0 descriptor?? [ 870.644146][T14863] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 870.651156][T14863] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 870.718250][T17837] ceph: No mds server is up or the cluster is laggy [ 870.849053][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 870.875645][T17847] overlay: ./bus is not a directory [ 870.880305][T17860] overlay: ./bus is not a directory [ 870.889777][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.955539][T17803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.979740][T17803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.089002][T17847] overlay: ./bus is not a directory [ 871.143695][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 871.143709][ T39] audit: type=1804 audit(1725562438.758:636): pid=17847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3514" name="/newroot/634/file0/bus" dev="9p" ino=37101703 res=1 errno=0 [ 871.179799][T15453] Bluetooth: hci0: command tx timeout [ 871.198995][ T5394] usb 6-1: USB disconnect, device number 76 [ 871.218860][ T5394] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 871.236855][ T39] audit: type=1326 audit(1725562438.848:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.257907][ T39] audit: type=1326 audit(1725562438.848:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.269863][ T39] audit: type=1326 audit(1725562438.858:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.269934][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'. [ 871.280822][ T39] audit: type=1326 audit(1725562438.858:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.295179][ T39] audit: type=1326 audit(1725562438.858:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.305566][ T39] audit: type=1326 audit(1725562438.858:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.314879][ T39] audit: type=1326 audit(1725562438.868:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.327699][ T39] audit: type=1326 audit(1725562438.868:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.354450][ T39] audit: type=1326 audit(1725562438.868:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.3.3515" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 871.377754][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.525209][T17875] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 871.534789][T17875] batman_adv: batadv2: Removing interface: netdevsim0 [ 871.540196][T17875] batman_adv: batadv4: Adding interface: netdevsim0 [ 871.542416][T17875] batman_adv: batadv4: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.557018][T17875] batman_adv: batadv4: Interface activated: netdevsim0 [ 871.579517][T15453] Bluetooth: hci1: command tx timeout [ 871.644347][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.673652][T17803] team0: Port device team_slave_0 added [ 871.694029][T17803] team0: Port device team_slave_1 added [ 871.861294][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.898669][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 872.007766][T17803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.014060][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.025963][T17803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.049940][T17803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.053065][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.074435][T17803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.088957][T17768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.316481][T17803] hsr_slave_0: entered promiscuous mode [ 872.332848][T17803] hsr_slave_1: entered promiscuous mode [ 872.349846][T17803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.353039][T17803] Cannot create hsr debugfs directory [ 872.366303][ T64] bridge_slave_1: left allmulticast mode [ 872.387395][ T64] bridge_slave_1: left promiscuous mode [ 872.390634][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.412028][ T64] bridge_slave_0: left allmulticast mode [ 872.414489][ T64] bridge_slave_0: left promiscuous mode [ 872.417122][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.938808][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 873.243589][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.252322][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.258549][ T64] bond0 (unregistering): Released all slaves [ 873.333077][T17768] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.432440][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.435871][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.451043][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.454379][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.659715][T15453] Bluetooth: hci1: command tx timeout [ 873.978661][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 874.063404][ T64] hsr_slave_0: left promiscuous mode [ 874.084706][ T64] hsr_slave_1: left promiscuous mode [ 874.093902][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.097135][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.103645][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.106998][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.183320][ T64] veth1_macvtap: left promiscuous mode [ 874.186317][ T64] veth0_macvtap: left promiscuous mode [ 874.189285][ T64] veth1_vlan: left promiscuous mode [ 874.192535][ T64] veth0_vlan: left promiscuous mode [ 875.008644][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 875.069230][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3519'. [ 875.149195][T17911] FAULT_INJECTION: forcing a failure. [ 875.149195][T17911] name failslab, interval 1, probability 0, space 0, times 0 [ 875.158795][T17911] CPU: 3 UID: 0 PID: 17911 Comm: syz.3.3522 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 875.163654][T17911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 875.168259][T17911] Call Trace: [ 875.169736][T17911] [ 875.170919][T17911] dump_stack_lvl+0x16c/0x1f0 [ 875.172915][T17911] should_fail_ex+0x497/0x5b0 [ 875.174782][T17911] ? fs_reclaim_acquire+0xae/0x160 [ 875.176865][T17911] should_failslab+0xc2/0x120 [ 875.178805][T17911] __kmalloc_noprof+0xcb/0x410 [ 875.180776][T17911] tomoyo_encode2+0x100/0x3e0 [ 875.182709][T17911] tomoyo_encode+0x2c/0x40 [ 875.184596][T17911] tomoyo_mount_acl+0x314/0x880 [ 875.186648][T17911] ? hlock_class+0x4e/0x130 [ 875.188472][T17911] ? __lock_acquire+0x1620/0x3cb0 [ 875.190587][T17911] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 875.192834][T17911] ? __pfx___lock_acquire+0x10/0x10 [ 875.195040][T17911] ? do_fast_syscall_32+0x32/0x80 [ 875.197218][T17911] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 875.199989][T17911] ? tomoyo_domain+0xbb/0x150 [ 875.201764][T17911] ? tomoyo_profile+0x47/0x60 [ 875.203542][T17911] tomoyo_mount_permission+0x16b/0x410 [ 875.205612][T17911] ? tomoyo_mount_permission+0x146/0x410 [ 875.207940][T17911] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 875.210634][T17911] ? get_current_fs_domain+0x188/0x1f0 [ 875.212958][T17911] security_sb_mount+0x8d/0xe0 [ 875.215003][T17911] path_mount+0x129/0x1f10 [ 875.217055][T17911] ? __pfx_path_mount+0x10/0x10 [ 875.220593][T17911] ? putname+0x12e/0x170 [ 875.223246][T17911] ? putname+0x12e/0x170 [ 875.225087][T17911] __ia32_sys_mount+0x292/0x310 [ 875.227155][T17911] ? __pfx___ia32_sys_mount+0x10/0x10 [ 875.229484][T17911] __do_fast_syscall_32+0x73/0x120 [ 875.231746][T17911] do_fast_syscall_32+0x32/0x80 [ 875.233782][T17911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 875.236533][T17911] RIP: 0023:0xf7fc4579 [ 875.238307][T17911] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 875.246403][T17911] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 875.249964][T17911] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000040 [ 875.253416][T17911] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000020000140 [ 875.256801][T17911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 875.260067][T17911] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 875.263376][T17911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 875.266756][T17911] [ 875.412596][ T1369] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.049510][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 876.840435][ T64] team0 (unregistering): Port device team_slave_1 removed [ 877.099029][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 877.122154][ T64] team0 (unregistering): Port device team_slave_0 removed [ 878.128767][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 878.905464][T17768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.116088][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 879.168650][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 879.250466][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 879.250480][ T39] audit: type=1326 audit(1725562446.868:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.284135][ T39] audit: type=1326 audit(1725562446.868:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.295407][ T39] audit: type=1326 audit(1725562446.918:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.320483][ T39] audit: type=1326 audit(1725562446.918:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.330968][ T39] audit: type=1326 audit(1725562446.918:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.334516][T17932] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 879.341516][ T39] audit: type=1326 audit(1725562446.918:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.341563][ T39] audit: type=1326 audit(1725562446.918:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.341603][ T39] audit: type=1326 audit(1725562446.918:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.368910][T17932] batman_adv: batadv1: Removing interface: netdevsim0 [ 879.374999][ T39] audit: type=1326 audit(1725562446.928:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.385693][ T39] audit: type=1326 audit(1725562446.928:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17926 comm="syz.1.3524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 879.387972][T17932] batman_adv: batadv2: Adding interface: netdevsim0 [ 879.398687][T17932] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.408707][T17932] batman_adv: batadv2: Interface activated: netdevsim0 [ 879.434864][T17768] veth0_vlan: entered promiscuous mode [ 879.530123][T17768] veth1_vlan: entered promiscuous mode [ 879.594688][T17768] veth0_macvtap: entered promiscuous mode [ 879.621510][T17803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 879.634204][T17803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 879.646109][T17768] veth1_macvtap: entered promiscuous mode [ 879.654175][T17803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 879.676905][T17803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 879.722278][T17768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.750886][T17768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.762207][T17768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.766014][T17768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.770166][T17768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.777778][T17768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.915170][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.927602][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.022486][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.028281][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.181846][T17803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.218638][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 880.320413][T17803] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.332671][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.336162][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.376383][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.379967][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.725543][T17803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.801236][T17803] veth0_vlan: entered promiscuous mode [ 880.820067][T17803] veth1_vlan: entered promiscuous mode [ 880.863013][T17803] veth0_macvtap: entered promiscuous mode [ 880.889425][T17803] veth1_macvtap: entered promiscuous mode [ 880.913564][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.919462][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.930978][T17803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.946210][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.953293][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.959975][T17803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.969450][T17803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.982164][T17803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.986031][T17803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.996209][T17803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.162409][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.165849][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.222298][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.225803][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.248816][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 882.015318][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.291173][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 882.944561][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.043573][ T5354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 883.063199][ T5354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 883.069927][ T5354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 883.071809][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.080784][ T5354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 883.084918][ T5354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 883.088903][ T5354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 883.303950][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.328780][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 883.491585][T17983] chnl_net:caif_netlink_parms(): no params data found [ 883.672881][ T64] bridge_slave_1: left allmulticast mode [ 883.687225][ T64] bridge_slave_1: left promiscuous mode [ 883.690192][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.766920][ T64] bridge_slave_0: left allmulticast mode [ 883.779027][ T64] bridge_slave_0: left promiscuous mode [ 883.781934][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.875780][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3538'. [ 884.368682][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 884.566528][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.573801][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.586944][ T64] bond0 (unregistering): Released all slaves [ 884.696351][T17983] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.730289][T17983] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.734815][T17983] bridge_slave_0: entered allmulticast mode [ 884.748471][T17983] bridge_slave_0: entered promiscuous mode [ 884.777852][T17983] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.781193][T17983] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.783884][T17983] bridge_slave_1: entered allmulticast mode [ 884.787342][T17983] bridge_slave_1: entered promiscuous mode [ 884.852950][T17983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.902240][T17983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.037321][T17983] team0: Port device team_slave_0 added [ 885.078865][T17983] team0: Port device team_slave_1 added [ 885.171724][T15453] Bluetooth: hci0: command tx timeout [ 885.236378][T17983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.255252][T17983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.268596][T17983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.280322][T17983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.283529][T17983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.296217][T17983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.325478][ T64] hsr_slave_0: left promiscuous mode [ 885.329303][ T64] hsr_slave_1: left promiscuous mode [ 885.332686][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.335913][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.340081][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.344398][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.398883][ T64] veth1_macvtap: left promiscuous mode [ 885.401151][ T64] veth0_macvtap: left promiscuous mode [ 885.403298][ T64] veth1_vlan: left promiscuous mode [ 885.406005][ T64] veth0_vlan: left promiscuous mode [ 885.418777][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 885.716202][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.734888][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.739196][ T5354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.744669][ T5354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.748771][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 885.758013][ T5354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 886.021616][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 886.021632][ T39] audit: type=1326 audit(1725562453.628:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.038912][ T39] audit: type=1326 audit(1725562453.628:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.051863][ T39] audit: type=1326 audit(1725562453.628:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.065266][ T39] audit: type=1326 audit(1725562453.648:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.078988][ T39] audit: type=1326 audit(1725562453.648:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.101593][ T39] audit: type=1326 audit(1725562453.648:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.139300][ T39] audit: type=1326 audit(1725562453.648:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.162863][ T39] audit: type=1326 audit(1725562453.668:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.176240][ T39] audit: type=1326 audit(1725562453.668:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.187660][ T39] audit: type=1326 audit(1725562453.668:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18019 comm="syz.3.3541" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 886.448877][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 887.248977][ T5354] Bluetooth: hci0: command tx timeout [ 887.488707][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 887.819176][ T5354] Bluetooth: hci1: command tx timeout [ 887.929217][ T64] team0 (unregistering): Port device team_slave_1 removed [ 888.108547][ T64] team0 (unregistering): Port device team_slave_0 removed [ 888.538633][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 889.328598][ T5354] Bluetooth: hci0: command tx timeout [ 889.571635][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 889.691484][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3541'. [ 889.709019][T18029] batman_adv: batadv4: Interface deactivated: netdevsim0 [ 889.712034][T18029] batman_adv: batadv4: Removing interface: netdevsim0 [ 889.717118][T18029] batman_adv: batadv5: Adding interface: netdevsim0 [ 889.720996][T18029] batman_adv: batadv5: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.734982][T18029] batman_adv: batadv5: Interface activated: netdevsim0 [ 889.898619][ T5354] Bluetooth: hci1: command tx timeout [ 889.984145][T17983] hsr_slave_0: entered promiscuous mode [ 889.997944][T17983] hsr_slave_1: entered promiscuous mode [ 890.265505][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 890.342689][T18044] batman_adv: batadv5: Interface deactivated: netdevsim0 [ 890.346911][T18044] batman_adv: batadv5: Removing interface: netdevsim0 [ 890.352788][T18044] batman_adv: batadv6: Adding interface: netdevsim0 [ 890.358272][T18044] batman_adv: batadv6: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.372760][T18044] batman_adv: batadv6: Interface activated: netdevsim0 [ 890.421679][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'. [ 890.500660][T18043] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 890.505352][T18043] batman_adv: batadv2: Removing interface: netdevsim0 [ 890.518772][T18043] batman_adv: batadv3: Adding interface: netdevsim0 [ 890.522391][T18043] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.538031][T18043] batman_adv: batadv3: Interface activated: netdevsim0 [ 890.608656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 890.932769][T18026] chnl_net:caif_netlink_parms(): no params data found [ 891.335283][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.373348][T18067] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 891.409279][ T5354] Bluetooth: hci0: command tx timeout [ 891.448138][T18026] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.459043][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.462359][T18026] bridge_slave_0: entered allmulticast mode [ 891.466042][T18026] bridge_slave_0: entered promiscuous mode [ 891.476203][T18026] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.484214][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.487204][T18026] bridge_slave_1: entered allmulticast mode [ 891.495983][T18026] bridge_slave_1: entered promiscuous mode [ 891.618718][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.650042][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 891.870535][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.915295][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 891.915309][ T39] audit: type=1326 audit(1725562459.528:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18082 comm="syz.3.3548" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x0 [ 891.978608][ T5354] Bluetooth: hci1: command tx timeout [ 892.112039][T18026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.169019][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.199864][T18026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.352776][T18026] team0: Port device team_slave_0 added [ 892.361843][T18026] team0: Port device team_slave_1 added [ 892.455231][T18026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.460126][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.474659][T18026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.540642][T18026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.543720][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.555731][T18026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.649025][ T64] bridge_slave_1: left allmulticast mode [ 892.651454][ T64] bridge_slave_1: left promiscuous mode [ 892.653782][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.660770][ T64] bridge_slave_0: left allmulticast mode [ 892.663357][ T64] bridge_slave_0: left promiscuous mode [ 892.665962][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.700217][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 893.566326][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.579688][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.625729][ T64] bond0 (unregistering): Released all slaves [ 893.729354][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 893.862888][T18026] hsr_slave_0: entered promiscuous mode [ 893.866718][T18026] hsr_slave_1: entered promiscuous mode [ 893.875701][T18026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.880921][T18026] Cannot create hsr debugfs directory [ 893.978418][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3550'. [ 894.020299][T17983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 894.032711][T17983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 894.048645][ T5354] Bluetooth: hci1: command tx timeout [ 894.052164][T17983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 894.205740][T17983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.313223][ T64] hsr_slave_0: left promiscuous mode [ 894.317764][ T64] hsr_slave_1: left promiscuous mode [ 894.323059][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.326425][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.348017][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.357682][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.437208][ T64] veth1_macvtap: left promiscuous mode [ 894.440879][ T64] veth0_macvtap: left promiscuous mode [ 894.443792][ T64] veth1_vlan: left promiscuous mode [ 894.446544][ T64] veth0_vlan: left promiscuous mode [ 894.769417][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 894.829331][T18091] ceph: No mds server is up or the cluster is laggy [ 895.240117][ T39] audit: type=1326 audit(1725562462.838:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18103 comm="syz.3.3552" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x0 [ 895.808885][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 896.518066][ T39] audit: type=1326 audit(1725562464.138:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.528832][ T39] audit: type=1326 audit(1725562464.138:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.542787][ T39] audit: type=1326 audit(1725562464.168:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.560072][ T39] audit: type=1326 audit(1725562464.168:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.590558][ T39] audit: type=1326 audit(1725562464.168:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.633335][ T39] audit: type=1326 audit(1725562464.168:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.643090][ T39] audit: type=1326 audit(1725562464.168:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.654086][ T39] audit: type=1326 audit(1725562464.168:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.3.3553" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x7ffc0000 [ 896.848850][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 897.128182][ T64] team0 (unregistering): Port device team_slave_1 removed [ 897.354069][ T64] team0 (unregistering): Port device team_slave_0 removed [ 897.889352][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 898.929016][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 898.976119][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'. [ 899.021317][T18112] batman_adv: batadv6: Interface deactivated: netdevsim0 [ 899.035011][T18112] batman_adv: batadv6: Removing interface: netdevsim0 [ 899.051268][T18112] batman_adv: batadv7: Adding interface: netdevsim0 [ 899.054884][T18112] batman_adv: batadv7: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.065729][T18112] batman_adv: batadv7: Interface activated: netdevsim0 [ 899.677183][T17983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.762566][T17983] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.785953][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.790525][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.830930][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.834256][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.983655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 900.240687][T18026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 900.256648][T18026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 900.272544][T18026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 900.313582][T18026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 900.543180][T18026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.554278][T17983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.580200][T18026] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.611047][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.614412][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.648230][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.650860][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.673283][T17983] veth0_vlan: entered promiscuous mode [ 900.705681][T17983] veth1_vlan: entered promiscuous mode [ 900.832699][T17983] veth0_macvtap: entered promiscuous mode [ 900.841303][T17983] veth1_macvtap: entered promiscuous mode [ 900.860188][T17983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.871694][T17983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.887485][T17983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.898815][T17983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.905813][T17983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.922859][T17983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.955809][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 900.955824][ T39] audit: type=1326 audit(1725562468.568:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18152 comm="syz.1.3556" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 901.019159][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 901.095097][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.113290][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.154232][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.157792][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.205935][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.292087][T18026] veth0_vlan: entered promiscuous mode [ 901.303180][T18026] veth1_vlan: entered promiscuous mode [ 901.374733][T18026] veth0_macvtap: entered promiscuous mode [ 901.382956][T18026] veth1_macvtap: entered promiscuous mode [ 901.407909][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.428581][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.435199][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.570626][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.575905][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.583365][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.597398][T18026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.605732][T18026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.642905][T18026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.646234][T18026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.888374][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.896103][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.926471][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.929953][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.058694][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 902.928985][ T5420] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 903.088718][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 903.128628][ T5420] usb 8-1: Using ep0 maxpacket: 32 [ 903.145689][ T5420] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.151092][ T5420] usb 8-1: config 0 has no interfaces? [ 903.153496][ T5420] usb 8-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 903.157309][ T5420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.162311][ T5420] usb 8-1: config 0 descriptor?? [ 903.591945][T14409] usb 8-1: USB disconnect, device number 64 [ 903.788421][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3562'. [ 903.845380][T18178] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 903.849106][T18178] batman_adv: batadv3: Removing interface: netdevsim0 [ 903.859173][T18178] batman_adv: batadv4: Adding interface: netdevsim0 [ 903.876290][T18178] batman_adv: batadv4: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.888630][T18178] batman_adv: batadv4: Interface activated: netdevsim0 [ 903.900476][ T39] audit: type=1326 audit(1725562471.518:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 903.916439][ T39] audit: type=1326 audit(1725562471.528:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18176 comm="syz.1.3562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 903.989910][T15943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.138687][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 905.103174][T15453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 905.110835][T15453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 905.114405][T15453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 905.119109][T15453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 905.122658][T15453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 905.125558][T15453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 905.168653][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 905.388426][T18186] chnl_net:caif_netlink_parms(): no params data found [ 905.744121][T15943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.887941][ T9288] [ 905.889086][ T9288] ====================================================== [ 905.891759][ T9288] WARNING: possible circular locking dependency detected [ 905.896731][ T9288] 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 Not tainted [ 905.917804][ T9288] ------------------------------------------------------ [ 905.919972][ T9288] kworker/3:5/9288 is trying to acquire lock: [ 905.922574][ T9288] ffff88802b93dd18 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x26b/0x1070 [ 905.926172][ T9288] [ 905.926172][ T9288] but task is already holding lock: [ 905.929296][ T9288] ffff88802b9397e0 (stock_lock){..-.}-{2:2}, at: local_lock_acquire+0x10/0x150 [ 905.935297][ T9288] [ 905.935297][ T9288] which lock already depends on the new lock. [ 905.935297][ T9288] [ 905.939785][ T9288] [ 905.939785][ T9288] the existing dependency chain (in reverse order) is: [ 905.943442][ T9288] [ 905.943442][ T9288] -> #2 (stock_lock){..-.}-{2:2}: [ 905.946451][ T9288] local_lock_acquire+0x23/0x150 [ 905.948693][ T9288] obj_cgroup_charge+0x7e/0x4d0 [ 905.950720][ T9288] __memcg_slab_post_alloc_hook+0x1b6/0x9c0 [ 905.953430][ T9288] __kmalloc_node_noprof+0x3c0/0x440 [ 905.955784][ T9288] bpf_map_kmalloc_node+0x98/0x4a0 [ 905.958074][ T9288] trie_update_elem+0x1ef/0xdb0 [ 905.960429][ T9288] bpf_map_update_value+0x2c1/0x6c0 [ 905.962944][ T9288] generic_map_update_batch+0x454/0x5f0 [ 905.965654][ T9288] bpf_map_do_batch+0x615/0x6e0 [ 905.967893][ T9288] __sys_bpf+0x151b/0x55e0 [ 905.970104][ T9288] __ia32_sys_bpf+0x76/0xe0 [ 905.972257][ T9288] __do_fast_syscall_32+0x73/0x120 [ 905.974522][ T9288] do_fast_syscall_32+0x32/0x80 [ 905.976685][ T9288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 905.979620][ T9288] [ 905.979620][ T9288] -> #1 (&trie->lock){..-.}-{2:2}: [ 905.982656][ T9288] _raw_spin_lock_irqsave+0x3a/0x60 [ 905.985164][ T9288] trie_delete_elem+0xb0/0x820 [ 905.987402][ T9288] 0xffffffffa0000891 [ 905.989376][ T9288] bpf_trace_run3+0x240/0x5a0 [ 905.991820][ T9288] __queue_work+0x4fa/0x1070 [ 905.993847][ T9288] queue_work_on+0x11a/0x140 [ 905.995857][ T9288] bpf_prog_load+0x19d7/0x2670 [ 905.998062][ T9288] __sys_bpf+0x9e0/0x55e0 [ 906.000058][ T9288] __ia32_sys_bpf+0x76/0xe0 [ 906.002314][ T9288] __do_fast_syscall_32+0x73/0x120 [ 906.004844][ T9288] do_fast_syscall_32+0x32/0x80 [ 906.007189][ T9288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 906.009602][ T9288] [ 906.009602][ T9288] -> #0 (&pool->lock){-.-.}-{2:2}: [ 906.012513][ T9288] __lock_acquire+0x24ed/0x3cb0 [ 906.014565][ T9288] lock_acquire+0x1b1/0x560 [ 906.016502][ T9288] _raw_spin_lock+0x2e/0x40 [ 906.018472][ T9288] __queue_work+0x26b/0x1070 [ 906.020370][ T9288] queue_work_on+0x11a/0x140 [ 906.022387][ T9288] drain_stock+0x284/0x2e0 [ 906.024353][ T9288] drain_local_stock+0xbb/0x330 [ 906.026485][ T9288] process_one_work+0x958/0x1ad0 [ 906.028620][ T9288] worker_thread+0x6c8/0xed0 [ 906.030599][ T9288] kthread+0x2c1/0x3a0 [ 906.032435][ T9288] ret_from_fork+0x45/0x80 [ 906.034346][ T9288] ret_from_fork_asm+0x1a/0x30 [ 906.036400][ T9288] [ 906.036400][ T9288] other info that might help us debug this: [ 906.036400][ T9288] [ 906.040359][ T9288] Chain exists of: [ 906.040359][ T9288] &pool->lock --> &trie->lock --> stock_lock [ 906.040359][ T9288] [ 906.044857][ T9288] Possible unsafe locking scenario: [ 906.044857][ T9288] [ 906.047710][ T9288] CPU0 CPU1 [ 906.049794][ T9288] ---- ---- [ 906.051860][ T9288] lock(stock_lock); [ 906.053420][ T9288] lock(&trie->lock); [ 906.055990][ T9288] lock(stock_lock); [ 906.058533][ T9288] lock(&pool->lock); [ 906.060086][ T9288] [ 906.060086][ T9288] *** DEADLOCK *** [ 906.060086][ T9288] [ 906.063213][ T9288] 5 locks held by kworker/3:5/9288: [ 906.065222][ T9288] #0: ffff88801ac88948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11f0/0x1ad0 [ 906.069546][ T9288] #1: ffffc9000727fd80 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((&memcg_stock) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((typeof(*((&memcg_stock))) *)((&memcg_stock)))); (typeof((typeof(*((&memcg_stock))) *)((&memcg_stock)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1ad0 [ 906.085237][ T9288] #2: ffff88802b9397e0 (stock_lock){..-.}-{2:2}, at: local_lock_acquire+0x10/0x150 [ 906.089000][ T9288] #3: ffffffff8ddb94a0 (rcu_read_lock){....}-{1:2}, at: drain_stock+0x13c/0x2e0 [ 906.092737][ T9288] #4: ffffffff8ddb94a0 (rcu_read_lock){....}-{1:2}, at: __queue_work+0xf2/0x1070 [ 906.096271][ T9288] [ 906.096271][ T9288] stack backtrace: [ 906.098522][ T9288] CPU: 3 UID: 0 PID: 9288 Comm: kworker/3:5 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 906.102555][ T9288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 906.106462][ T9288] Workqueue: events drain_local_stock [ 906.108639][ T9288] Call Trace: [ 906.109947][ T9288] [ 906.111077][ T9288] dump_stack_lvl+0x116/0x1f0 [ 906.112876][ T9288] check_noncircular+0x31a/0x400 [ 906.114659][ T9288] ? __pfx_check_noncircular+0x10/0x10 [ 906.116512][ T9288] ? lockdep_lock+0xc6/0x200 [ 906.118079][ T9288] ? __pfx_lockdep_lock+0x10/0x10 [ 906.119801][ T9288] __lock_acquire+0x24ed/0x3cb0 [ 906.121462][ T9288] ? __pfx___lock_acquire+0x10/0x10 [ 906.123267][ T9288] lock_acquire+0x1b1/0x560 [ 906.125042][ T9288] ? __queue_work+0x26b/0x1070 [ 906.126901][ T9288] ? __pfx_lock_acquire+0x10/0x10 [ 906.128850][ T9288] ? __pfx_lock_acquire+0x10/0x10 [ 906.130775][ T9288] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 906.133099][ T9288] ? __debug_object_init+0x34a/0x480 [ 906.135166][ T9288] _raw_spin_lock+0x2e/0x40 [ 906.136943][ T9288] ? __queue_work+0x26b/0x1070 [ 906.138733][ T9288] __queue_work+0x26b/0x1070 [ 906.140589][ T9288] ? lockdep_init_map_type+0x16d/0x7d0 [ 906.142709][ T9288] queue_work_on+0x11a/0x140 [ 906.144546][ T9288] drain_stock+0x284/0x2e0 [ 906.146293][ T9288] drain_local_stock+0xbb/0x330 [ 906.148199][ T9288] process_one_work+0x958/0x1ad0 [ 906.150131][ T9288] ? __pfx_lock_acquire+0x10/0x10 [ 906.152108][ T9288] ? __pfx_process_one_work+0x10/0x10 [ 906.154199][ T9288] ? assign_work+0x1a0/0x250 [ 906.155973][ T9288] worker_thread+0x6c8/0xed0 [ 906.157796][ T9288] ? __kthread_parkme+0x148/0x220 [ 906.159832][ T9288] ? __pfx_worker_thread+0x10/0x10 [ 906.162173][ T9288] kthread+0x2c1/0x3a0 [ 906.163838][ T9288] ? _raw_spin_unlock_irq+0x23/0x50 [ 906.165878][ T9288] ? __pfx_kthread+0x10/0x10 [ 906.167674][ T9288] ret_from_fork+0x45/0x80 [ 906.169430][ T9288] ? __pfx_kthread+0x10/0x10 [ 906.171312][ T9288] ret_from_fork_asm+0x1a/0x30 [ 906.173180][ T9288] [ 906.208656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 906.245449][T15943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.252076][T18186] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.255577][T18186] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.259591][T18186] bridge_slave_0: entered allmulticast mode [ 906.263353][T18186] bridge_slave_0: entered promiscuous mode [ 906.272506][T18186] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.275674][T18186] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.280615][T18186] bridge_slave_1: entered allmulticast mode [ 906.284430][T18186] bridge_slave_1: entered promiscuous mode [ 906.333982][T15943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.390721][T18186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.398291][T18186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.455897][T18186] team0: Port device team_slave_0 added [ 906.461459][T18186] team0: Port device team_slave_1 added [ 906.560581][T18186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.564200][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.578580][T18186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.586783][T18186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.591224][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.606411][T18186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.708440][T18186] hsr_slave_0: entered promiscuous mode [ 906.714107][T18186] hsr_slave_1: entered promiscuous mode [ 906.717638][T18186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.721941][T18186] Cannot create hsr debugfs directory [ 906.833975][T15943] bridge_slave_1: left allmulticast mode [ 906.837180][T15943] bridge_slave_1: left promiscuous mode [ 906.840674][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.845774][T15943] bridge_slave_0: left allmulticast mode [ 906.848176][T15943] bridge_slave_0: left promiscuous mode [ 906.857242][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.122797][T15943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.128208][T15943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.134163][T15943] bond0 (unregistering): Released all slaves [ 907.179475][ T5354] Bluetooth: hci0: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 907.258620][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 907.411393][T15453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 907.414899][T15453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 907.429030][T15453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 907.439916][T15453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 907.443206][T15453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 907.446627][T15453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.671729][T17119] bridge0: port 3(syz_tun) entered disabled state [ 907.676503][T17119] syz_tun (unregistering): left allmulticast mode [ 907.680316][T17119] syz_tun (unregistering): left promiscuous mode [ 907.685362][T17119] bridge0: port 3(syz_tun) entered disabled state [ 907.714257][T15943] hsr_slave_0: left promiscuous mode [ 907.717278][T15943] hsr_slave_1: left promiscuous mode [ 907.720619][T15943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.723708][T15943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.727281][T15943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.731831][T15943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.736671][T15943] veth1_macvtap: left promiscuous mode [ 907.739807][T15943] veth0_macvtap: left promiscuous mode [ 907.742245][T15943] veth1_vlan: left promiscuous mode [ 907.744568][T15943] veth0_vlan: left promiscuous mode [ 908.377078][T15943] team0 (unregistering): Port device team_slave_1 removed [ 908.475140][T15943] team0 (unregistering): Port device team_slave_0 removed [ 909.026453][T18206] chnl_net:caif_netlink_parms(): no params data found [ 909.244061][T18206] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.251637][T18206] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.254773][T18206] bridge_slave_0: entered allmulticast mode [ 909.258646][ T5354] Bluetooth: hci0: command tx timeout [ 909.265081][T18206] bridge_slave_0: entered promiscuous mode [ 909.276235][T18206] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.279706][T18206] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.282928][T18206] bridge_slave_1: entered allmulticast mode [ 909.286510][T18206] bridge_slave_1: entered promiscuous mode [ 909.412039][T18206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.443317][T18206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.509579][ T5354] Bluetooth: hci1: command tx timeout [ 909.557432][T18206] team0: Port device team_slave_0 added [ 909.563655][T18206] team0: Port device team_slave_1 added [ 909.664744][T18206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.668092][T18206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.707303][T18206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.762917][T15943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.787088][T18206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.790686][T18206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.811261][T18206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.871544][T15943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.938173][T18206] hsr_slave_0: entered promiscuous mode [ 909.947595][T18206] hsr_slave_1: entered promiscuous mode [ 909.959235][T15943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.038932][T15943] batman_adv: batadv4: Interface deactivated: netdevsim0 [ 910.045136][T15943] batman_adv: batadv4: Removing interface: netdevsim0 [ 910.063816][T15943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.197420][T18206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.304949][T18206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.435499][T18206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.649716][T18206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.743753][T15943] bridge_slave_1: left allmulticast mode [ 910.746482][T15943] bridge_slave_1: left promiscuous mode [ 910.750232][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.769113][T15943] bridge_slave_0: left allmulticast mode [ 910.782452][T15943] bridge_slave_0: left promiscuous mode [ 910.785547][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.805671][T15943] bridge_slave_1: left allmulticast mode [ 910.808194][T15943] bridge_slave_1: left promiscuous mode [ 910.812003][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.818066][T15943] bridge_slave_0: left allmulticast mode [ 910.821443][T15943] bridge_slave_0: left promiscuous mode [ 910.824098][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.829943][T15943] bridge_slave_1: left allmulticast mode [ 910.832277][T15943] bridge_slave_1: left promiscuous mode [ 910.834855][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.839786][T15943] bridge_slave_0: left allmulticast mode [ 910.841960][T15943] bridge_slave_0: left promiscuous mode [ 910.844237][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.355176][T15943] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 911.503287][T15943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.526131][T15943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.533517][T15943] bond0 (unregistering): Released all slaves [ 911.547768][T15943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.587198][ T5354] Bluetooth: hci1: command tx timeout [ 911.590949][T15943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.596078][T15943] bond0 (unregistering): Released all slaves [ 911.753944][T15943] bond1 (unregistering): Released all slaves [ 911.765269][T15943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.771536][T15943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.776278][T15943] bond0 (unregistering): Released all slaves [ 911.901483][T15943] tipc: Disabling bearer [ 911.908763][T15943] tipc: Left network mode [ 911.911398][T18206] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 911.918525][T18206] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 911.928543][T18206] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 911.936154][T18206] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 912.060752][T18206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.075676][T18206] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.106732][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.111027][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.124546][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.128397][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.169112][T15943] IPVS: stopping master sync thread 14696 ... [ 912.174918][T15943] IPVS: stopping master sync thread 14695 ... [ 912.199841][T15943] IPVS: stopping master sync thread 14694 ... [ 912.203681][T15943] IPVS: stopping master sync thread 14692 ... [ 912.337327][T18206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.376267][T18206] veth0_vlan: entered promiscuous mode [ 912.410723][T18206] veth1_vlan: entered promiscuous mode [ 912.432231][T18206] veth0_macvtap: entered promiscuous mode [ 912.440929][T18206] veth1_macvtap: entered promiscuous mode [ 912.500409][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.505196][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.514799][T18206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.520672][T18206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.525344][T18206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.533503][T18206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.539663][T18206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.543593][T18206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.547487][T18206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.553097][T18206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.631460][T18206] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 912.651875][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.653236][T18206] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 912.655007][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.684221][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.687725][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.135551][T15943] hsr_slave_0: left promiscuous mode [ 913.142941][T15943] hsr_slave_1: left promiscuous mode [ 913.146660][T15943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.163866][T15943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.175339][T15943] hsr_slave_0: left promiscuous mode [ 913.180392][T15943] hsr_slave_1: left promiscuous mode [ 913.191687][T15943] hsr_slave_0: left promiscuous mode [ 913.195569][T15943] hsr_slave_1: left promiscuous mode [ 913.200801][T15943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.204071][T15943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.214577][T15943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.218265][T15943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.224812][T15943] veth1_macvtap: left promiscuous mode [ 913.227202][T15943] veth0_macvtap: left promiscuous mode [ 913.232525][T15943] veth1_macvtap: left promiscuous mode [ 913.234971][T15943] veth0_macvtap: left promiscuous mode [ 913.237514][T15943] veth1_vlan: left promiscuous mode [ 913.239920][T15943] veth0_vlan: left promiscuous mode [ 913.449213][T15943] team0 (unregistering): Port device team_slave_1 removed [ 913.458762][T15943] team0 (unregistering): Port device team_slave_0 removed [ 914.092788][T15943] team0 (unregistering): Port device team_slave_1 removed [ 914.184872][T15943] team0 (unregistering): Port device team_slave_0 removed [ 914.952261][T15943] team0 (unregistering): Port device team_slave_1 removed [ 915.066203][T15943] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 18:54:33 Registers: info registers vcpu 0 CPU#0 EAX=f6cc9e68 EBX=ffffffff ECX=00000000 EDX=8225d73b ESI=8225d6e0 EDI=f6cc9528 EBP=f6cc9b78 ESP=ffb252f0 EIP=f712faeb EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57822440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e7eeff8 CR3=0000000068f5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffffff2263d7b RBX=ffffc9000393e888 RCX=ffffffff813c94d1 RDX=dffffc0000000000 RSI=ffffffff813c94fe RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000393e808 R8 =0000000000000001 R9 =0000000000000009 R10=0000000000000005 R11=0000000000000000 R12=ffffffff9131ebda R13=0000000000000005 R14=ffffffff9131ebde R15=ffffc9000393fb00 RIP=ffffffff813c9530 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 000fffff 00000000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72bf39c CR3=0000000066f22000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000018800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000003f RBX=000000000000003f RCX=ffffffff81da338b RDX=1ffff1100358d3c1 RSI=ffffffff81da3347 RDI=0000000000000005 RBP=ffff88801ac69e08 RSP=ffffc90000e7f6d0 R8 =0000000000000005 R9 =0000000000000100 R10=000000000000003f R11=ffff88802b828a40 R12=0000000000000000 R13=ffff88801ac69810 R14=dffffc0000000000 R15=0000000000000006 RIP=ffffffff81da335d RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200016c0 CR3=000000005e984000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=fd29f321fd29f321 fd29f321fd29f321 fd29f321fd29f321 fd29f321fd29f321 fd29f321fd29f321 fd29f321fd29f321 fd29f321fd29f321 fd29f321fd29f321 ZMM22=a8882079a8882079 a8882079a8882079 a8882079a8882079 a8882079a8882079 a8882079a8882079 a8882079a8882079 a8882079a8882079 a8882079a8882079 ZMM23=7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 7ceb2fb37ceb2fb3 ZMM24=5aeab8615aeab861 5aeab8615aeab861 5aeab8615aeab861 5aeab8615aeab861 5aeab8615aeab861 5aeab8615aeab861 5aeab8615aeab861 5aeab8615aeab861 ZMM25=4bd9f9004bd9f900 4bd9f9004bd9f900 4bd9f9004bd9f900 4bd9f9004bd9f900 4bd9f9004bd9f900 4bd9f9004bd9f900 4bd9f9004bd9f900 4bd9f9004bd9f900 ZMM26=5ed6dc765ed6dc76 5ed6dc765ed6dc76 5ed6dc765ed6dc76 5ed6dc765ed6dc76 5ed6dc765ed6dc76 5ed6dc765ed6dc76 5ed6dc765ed6dc76 5ed6dc765ed6dc76 ZMM27=9afabb3d9afabb3d 9afabb3d9afabb3d 9afabb3d9afabb3d 9afabb3d9afabb3d 9afabb3d9afabb3d 9afabb3d9afabb3d 9afabb3d9afabb3d 9afabb3d9afabb3d ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e4160000e4160000 e4160000e4160000 e4160000e4160000 e4160000e4160000 e4160000e4160000 e4160000e4160000 e4160000e4160000 e4160000e4160000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc1765 RDI=ffffffff9a514600 RBP=ffffffff9a5145c0 RSP=ffffc9000727f308 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3038383866666666 R12=0000000000000000 R13=000000000000002d R14=ffffffff84fc1700 R15=0000000000000000 RIP=ffffffff84fc178f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fcf2ff8 CR3=000000005e984000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000