last executing test programs: 55.58216117s ago: executing program 0 (id=2727): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 47.904431634s ago: executing program 0 (id=2727): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 37.090955726s ago: executing program 0 (id=2727): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 27.207417125s ago: executing program 0 (id=2727): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 17.58246468s ago: executing program 0 (id=2727): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 6.718734775s ago: executing program 0 (id=2727): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2.857176473s ago: executing program 3 (id=3764): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031c0000000000000002000020d3"]) 2.794618263s ago: executing program 3 (id=3765): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 2.543530723s ago: executing program 1 (id=3769): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000100000024000300a05ca84f6c9c8e"], 0xe84}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.021260164s ago: executing program 1 (id=3772): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_id}, 0x20) 1.960239179s ago: executing program 1 (id=3773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000001840)=""/4083, 0xff3}], 0x1) pread64(r3, &(0x7f0000000000)=""/16, 0x10, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 1.163555482s ago: executing program 2 (id=3775): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0046d00, &(0x7f0000001500)) 1.163358464s ago: executing program 2 (id=3776): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0) 1.044770069s ago: executing program 2 (id=3777): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000300)) 503.937757ms ago: executing program 1 (id=3778): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000a188dd660000faff000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/consoles\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) pread64(r3, &(0x7f0000001840)=""/88, 0x58, 0x9) r4 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x5, r5, 0x893}, 0xc) getsockopt$MRT6(r4, 0x29, 0xcf, 0x0, &(0x7f0000000040)=0x50) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x5, @empty, 0x2}, {0xa, 0x4e24, 0x5, @empty, 0x1}, 0x1, {[0x96c3, 0xfff, 0x200, 0x7ffffffe, 0x40, 0x2, 0x10001, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0x3ff, @mcast2, 0x55}, {0xa, 0x4e24, 0xffff, @empty, 0xe00}, 0x0, {[0x9, 0x4, 0x5, 0x3f, 0x9, 0x7fff, 0xad5b, 0x9]}}, 0x5c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x48000) splice(r6, 0x0, r9, 0x0, 0x7, 0x0) close(r8) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) bind$tipc(r1, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) 503.288039ms ago: executing program 3 (id=3779): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="000000004000000000006a010100"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d9000200202f00fe8000000000000000000000000000aaff02000000"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000002030300000000000000000000000000080003400000000008000100010000000800044000000000090002ff0700000001000000"], 0x38}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x0, 0x20, 0xffffa}, 0x2f) r6 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x81}, 0x2f) close(r7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 343.166733ms ago: executing program 1 (id=3780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc0}, {@in6=@local}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 342.807523ms ago: executing program 1 (id=3781): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000100000024000300a05ca84f6c9c8e"], 0xe84}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 248.996202ms ago: executing program 3 (id=3782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000102c0)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) 118.28859ms ago: executing program 2 (id=3783): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0x47, &(0x7f0000000740), &(0x7f0000000780)=0x8) 112.382643ms ago: executing program 3 (id=3784): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_id}, 0x20) 112.214478ms ago: executing program 2 (id=3785): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0046d00, &(0x7f0000001500)) 215.877µs ago: executing program 2 (id=3786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000001840)=""/4083, 0xff3}], 0x1) pread64(r3, &(0x7f0000000000)=""/16, 0x10, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=3787): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) socket$kcm(0x10, 0x0, 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/6, 0x6}], 0x1}}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_rxfh={0x24, 0x0, 0x0, 0x0, 0x0, "f77fb2"}}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x5, 0x8, 0x0) kernel console output (not intermixed with test programs): 212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.376379][T13404] vcan0 speed is unknown, defaulting to 1000 [ 309.580816][T13404] chnl_net:caif_netlink_parms(): no params data found [ 309.608647][ T4634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.620338][ T4634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.630876][ T4634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.633724][T13417] netlink: 'syz.1.3074': attribute type 10 has an invalid length. [ 309.638702][ T4634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.641890][ T4634] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.645214][ T4634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.664546][T13417] team0: Device ipvlan1 failed to register rx_handler [ 309.754046][T13419] vcan0 speed is unknown, defaulting to 1000 [ 309.754616][T13404] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.759327][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.762671][T13404] bridge_slave_0: entered allmulticast mode [ 309.766088][T13404] bridge_slave_0: entered promiscuous mode [ 309.771520][T13404] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.779808][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.782899][T13404] bridge_slave_1: entered allmulticast mode [ 309.786104][T13404] bridge_slave_1: entered promiscuous mode [ 309.827540][T13404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.834980][T13404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.912223][T13404] team0: Port device team_slave_0 added [ 309.922972][T13404] team0: Port device team_slave_1 added [ 309.962784][ T39] audit: type=1326 audit(1720425762.474:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 309.978651][ T39] audit: type=1326 audit(1720425762.474:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 309.987184][ T39] audit: type=1326 audit(1720425762.494:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.000213][ T39] audit: type=1326 audit(1720425762.494:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.009621][ T39] audit: type=1326 audit(1720425762.494:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.009930][T13404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.022535][T13404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.023974][ T39] audit: type=1326 audit(1720425762.494:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.032777][T13404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.043530][T13404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.048027][T13404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.048821][ T39] audit: type=1326 audit(1720425762.494:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.058668][T13404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.067896][ T39] audit: type=1326 audit(1720425762.494:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.079889][ T39] audit: type=1326 audit(1720425762.494:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.088616][ T39] audit: type=1326 audit(1720425762.494:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.1.3076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7ffc0000 [ 310.156274][T13404] hsr_slave_0: entered promiscuous mode [ 310.159874][T13404] hsr_slave_1: entered promiscuous mode [ 310.375982][T13419] chnl_net:caif_netlink_parms(): no params data found [ 310.498411][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.501056][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.504333][T13419] bridge_slave_0: entered allmulticast mode [ 310.509109][T13419] bridge_slave_0: entered promiscuous mode [ 310.515946][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.519151][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.521981][T13419] bridge_slave_1: entered allmulticast mode [ 310.526356][T13419] bridge_slave_1: entered promiscuous mode [ 310.589129][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.633967][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.706691][T13419] team0: Port device team_slave_0 added [ 310.714769][T13419] team0: Port device team_slave_1 added [ 310.774915][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.777443][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.792040][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.799262][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.802408][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.814603][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.925647][T13419] hsr_slave_0: entered promiscuous mode [ 310.943457][T13419] hsr_slave_1: entered promiscuous mode [ 310.946840][T13419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.949769][T13419] Cannot create hsr debugfs directory [ 311.242074][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.313470][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.343234][ T5212] Bluetooth: hci4: command tx timeout [ 311.426809][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.624343][ T1093] bridge_slave_1: left allmulticast mode [ 311.627015][ T1093] bridge_slave_1: left promiscuous mode [ 311.630372][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.639328][ T1093] bridge_slave_0: left allmulticast mode [ 311.641734][ T1093] bridge_slave_0: left promiscuous mode [ 311.645220][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.663647][ T5212] Bluetooth: hci5: command tx timeout [ 312.023687][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.030759][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.038806][ T1093] bond0 (unregistering): Released all slaves [ 312.501493][ T1093] hsr_slave_0: left promiscuous mode [ 312.512949][ T1093] hsr_slave_1: left promiscuous mode [ 312.528789][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.531202][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.539760][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.542997][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.573157][ T1093] veth1_macvtap: left promiscuous mode [ 312.575540][ T1093] veth0_macvtap: left promiscuous mode [ 312.577989][ T1093] veth1_vlan: left promiscuous mode [ 312.580308][ T1093] veth0_vlan: left promiscuous mode [ 313.432551][ T5212] Bluetooth: hci4: command tx timeout [ 313.480801][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 313.559457][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 313.755251][ T5212] Bluetooth: hci5: command tx timeout [ 314.274021][T13419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.278973][T13419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.413676][T13419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.418170][T13419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.555895][T13419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.560442][T13419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.632238][T13419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.636623][T13419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.831085][T13404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.840369][T13404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.855283][T13404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.870375][T13404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.885987][ T1093] bridge_slave_1: left allmulticast mode [ 314.888531][ T1093] bridge_slave_1: left promiscuous mode [ 314.891115][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.904464][ T1093] bridge_slave_0: left allmulticast mode [ 314.906973][ T1093] bridge_slave_0: left promiscuous mode [ 314.909570][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.502592][ T5212] Bluetooth: hci4: command tx timeout [ 315.515219][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.521076][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.527234][ T1093] bond0 (unregistering): Released all slaves [ 315.536853][ T1093] bond1 (unregistering): Released all slaves [ 315.617190][T13419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.626999][T13419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.643051][T13419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.656874][T13419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.812967][T13404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.840693][T13419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.841032][ T5212] Bluetooth: hci5: command tx timeout [ 315.853760][T13507] xt_TCPMSS: Only works on TCP SYN packets [ 315.894547][T13404] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.913924][T13419] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.922153][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.925598][T10671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.956721][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.960184][ T4655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.003839][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.006954][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.026968][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.029855][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.078510][T13404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.083402][T13404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.260854][ T1093] hsr_slave_0: left promiscuous mode [ 316.264028][ T1093] hsr_slave_1: left promiscuous mode [ 316.267584][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.270892][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.299745][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.303789][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.357517][ T1093] veth1_macvtap: left promiscuous mode [ 316.360025][ T1093] veth0_macvtap: left promiscuous mode [ 316.363458][ T1093] veth1_vlan: left promiscuous mode [ 316.365832][ T1093] veth0_vlan: left promiscuous mode [ 316.476689][ T1093] infiniband syz1: set down [ 317.357498][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 317.477451][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 317.585420][ T5212] Bluetooth: hci4: command tx timeout [ 317.902892][ T5212] Bluetooth: hci5: command tx timeout [ 318.217491][ T56] smc: removing ib device syz1 [ 318.246845][T10671] vcan0 speed is unknown, defaulting to 1000 [ 318.305548][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.320682][T13404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.403903][T13419] veth0_vlan: entered promiscuous mode [ 318.431468][T13419] veth1_vlan: entered promiscuous mode [ 318.468398][T13404] veth0_vlan: entered promiscuous mode [ 318.536579][T13404] veth1_vlan: entered promiscuous mode [ 318.545040][T13419] veth0_macvtap: entered promiscuous mode [ 318.564243][T13419] veth1_macvtap: entered promiscuous mode [ 318.608918][T13404] veth0_macvtap: entered promiscuous mode [ 318.625669][T13404] veth1_macvtap: entered promiscuous mode [ 318.636744][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.641324][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.646310][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.650904][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.655878][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.660199][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.664298][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.668523][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.674817][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.680153][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.684228][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.688600][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.692915][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.696910][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.701294][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.706239][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.710793][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.719410][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.741105][T13419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.746231][T13419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.750182][T13419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.755477][T13419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.804074][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.808292][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.812122][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.823838][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.827854][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.832122][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.839405][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.844986][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.850554][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.855028][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.861101][T13404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.879636][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 318.879651][ T39] audit: type=1400 audit(1720425771.374:1132): avc: denied { getopt } for pid=13538 comm="syz.3.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.900232][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.906092][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.910327][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.915800][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.920032][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.933101][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.938721][ T39] audit: type=1400 audit(1720425771.444:1133): avc: denied { create } for pid=13538 comm="syz.3.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 318.940459][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.947631][ T39] audit: type=1400 audit(1720425771.454:1134): avc: denied { getopt } for pid=13538 comm="syz.3.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 318.953214][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.963773][T13404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.968515][T13404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.975598][T13404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.987101][T13404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.990974][T13404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.995013][T13404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.998524][T13404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.179626][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.195385][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.273195][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.276695][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.319746][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.323277][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.421295][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.430269][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.624585][ T39] audit: type=1326 audit(1720425772.134:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.3.3120" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68e3d75bd9 code=0x0 [ 320.862803][T13593] program syz.2.3129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.895962][ T39] audit: type=1400 audit(1720425774.404:1136): avc: denied { getopt } for pid=13596 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 322.020077][ T4634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.054404][ T4634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.067336][ T4634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.082537][ T4634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.086607][ T4634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.090220][ T4634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.782259][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.871440][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.898821][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.911138][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3138'. [ 322.916901][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3138'. [ 323.023297][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.040482][ T39] audit: type=1326 audit(1720425775.544:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.3.3142" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68e3d75bd9 code=0x0 [ 323.080372][T13601] chnl_net:caif_netlink_parms(): no params data found [ 323.136293][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.254613][T13632] program syz.1.3143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.313048][T13601] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.316217][T13601] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.319731][T13601] bridge_slave_0: entered allmulticast mode [ 323.324066][T13601] bridge_slave_0: entered promiscuous mode [ 323.329460][T13601] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.334265][T13601] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.337880][T13601] bridge_slave_1: entered allmulticast mode [ 323.343862][T13601] bridge_slave_1: entered promiscuous mode [ 324.151752][T13660] cgroup: noprefix used incorrectly [ 324.227858][ T5212] Bluetooth: hci3: command tx timeout [ 325.274845][T13650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3149'. [ 325.278940][T13650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3149'. [ 325.324556][T13601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.332182][T13601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.402766][ T56] bridge_slave_1: left allmulticast mode [ 325.405341][ T56] bridge_slave_1: left promiscuous mode [ 325.408171][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.414266][ T56] bridge_slave_0: left allmulticast mode [ 325.416820][ T56] bridge_slave_0: left promiscuous mode [ 325.419846][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.806478][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.813949][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.820868][ T56] bond0 (unregistering): Released all slaves [ 325.837408][T13601] team0: Port device team_slave_0 added [ 325.840874][T13683] bridge0: port 3(hsr0) entered blocking state [ 325.844705][T13683] bridge0: port 3(hsr0) entered disabled state [ 325.847309][T13683] hsr0: entered allmulticast mode [ 325.849255][T13683] hsr_slave_0: entered allmulticast mode [ 325.850939][T13683] hsr_slave_1: entered allmulticast mode [ 325.854083][T13683] hsr0: entered promiscuous mode [ 325.856199][T13683] bridge0: port 3(hsr0) entered blocking state [ 325.858098][T13683] bridge0: port 3(hsr0) entered forwarding state [ 325.860571][T13687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3165'. [ 325.866317][T13687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3165'. [ 325.914462][T13601] team0: Port device team_slave_1 added [ 325.999033][T13601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.002172][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.014282][T13601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.072947][T13601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.076003][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.086165][T13601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.172633][T13696] program syz.1.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.238754][T13601] hsr_slave_0: entered promiscuous mode [ 326.244372][T13601] hsr_slave_1: entered promiscuous mode [ 326.251400][T13601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.258487][T13601] Cannot create hsr debugfs directory [ 326.303060][ T5212] Bluetooth: hci3: command tx timeout [ 326.356711][T13710] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3175'. [ 328.024373][ T56] hsr_slave_0: left promiscuous mode [ 328.041111][T13720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3178'. [ 328.046375][ T56] hsr_slave_1: left promiscuous mode [ 328.051073][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.054639][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.057853][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.061019][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.114729][ T56] veth1_macvtap: left promiscuous mode [ 328.116965][ T56] veth0_macvtap: left promiscuous mode [ 328.119290][ T56] veth1_vlan: left promiscuous mode [ 328.122173][ T56] veth0_vlan: left promiscuous mode [ 328.392555][ T5212] Bluetooth: hci3: command tx timeout [ 329.127497][ T56] team0 (unregistering): Port device team_slave_1 removed [ 329.245045][ T56] team0 (unregistering): Port device team_slave_0 removed [ 330.151511][ C3] vkms_vblank_simulate: vblank timer overrun [ 330.374090][T13741] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 330.462508][ T5212] Bluetooth: hci3: command tx timeout [ 330.489296][T13744] program syz.3.3187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.536314][T13746] input: syz1 as /devices/virtual/input/input30 [ 331.172679][ T39] audit: type=1326 audit(1720425783.684:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13737 comm="syz.2.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 331.189665][T13754] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 331.191608][ T39] audit: type=1326 audit(1720425783.684:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13737 comm="syz.2.3184" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 332.621327][T13770] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 332.704095][T13601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.714457][T13601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.722920][T13601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.728966][T13601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.831994][T13601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.837680][T13785] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 332.854040][T13601] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.861596][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.864590][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.877662][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3201'. [ 332.884347][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.887261][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.969824][ T39] audit: type=1400 audit(1720425785.474:1140): avc: denied { nlmsg_read } for pid=13792 comm="syz.1.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 333.014850][T13798] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 333.056775][T13601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.114036][T13601] veth0_vlan: entered promiscuous mode [ 333.124454][T13601] veth1_vlan: entered promiscuous mode [ 333.176552][T13601] veth0_macvtap: entered promiscuous mode [ 333.188359][T13601] veth1_macvtap: entered promiscuous mode [ 333.228623][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.239695][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.244487][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.248331][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.252088][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.257451][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.260793][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.264869][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.269152][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.279094][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.290143][T13601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.300366][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.305429][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.313681][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.318204][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.322420][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.327449][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.332072][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.337985][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.342549][T13601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.347241][T13601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.355063][T13601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.371803][T13601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.375883][T13601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.379913][T13601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.384693][T13601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.479499][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.483557][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.525545][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.529106][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.109004][T13816] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 334.174765][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3211'. [ 334.198215][T13822] ip6t_srh: unknown srh invflags 7863 [ 334.248008][T13827] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 335.406455][T13851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 335.500309][T13857] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 335.602516][ T39] audit: type=1400 audit(1720425788.104:1141): avc: denied { append } for pid=13862 comm="syz.1.3227" name="nvram" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 335.941043][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3231'. [ 336.603723][T13891] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3238'. [ 337.209669][T13914] syzkaller0: entered promiscuous mode [ 337.211801][T13914] syzkaller0: entered allmulticast mode [ 337.880820][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.755957][ T4634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.760876][ T4634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.764625][ T4634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.768810][ T4634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.771536][ T4634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.774681][ T4634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.905264][T13923] chnl_net:caif_netlink_parms(): no params data found [ 339.015661][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.018369][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.020805][T13923] bridge_slave_0: entered allmulticast mode [ 339.025205][T13923] bridge_slave_0: entered promiscuous mode [ 339.029350][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.031754][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.034470][T13923] bridge_slave_1: entered allmulticast mode [ 339.037556][T13923] bridge_slave_1: entered promiscuous mode [ 339.077813][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.086657][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.137176][T13923] team0: Port device team_slave_0 added [ 339.143296][T13923] team0: Port device team_slave_1 added [ 339.201793][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.204987][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.218987][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.225712][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.228792][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.240304][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.314730][T13923] hsr_slave_0: entered promiscuous mode [ 339.317577][T13923] hsr_slave_1: entered promiscuous mode [ 340.203899][ T39] audit: type=1400 audit(1720425792.714:1142): avc: denied { bind } for pid=13932 comm="syz.3.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 340.373473][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.479145][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.501158][T13950] input: syz1 as /devices/virtual/input/input31 [ 340.610058][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.833306][ T12] bridge_slave_1: left allmulticast mode [ 340.835869][ T12] bridge_slave_1: left promiscuous mode [ 340.838431][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.844966][ T12] bridge_slave_0: left allmulticast mode [ 340.847256][ T12] bridge_slave_0: left promiscuous mode [ 340.849515][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.864994][ T5212] Bluetooth: hci3: command tx timeout [ 341.148914][ T39] audit: type=1326 audit(1720425793.654:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.1.3256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7fc00000 [ 341.159354][ T39] audit: type=1326 audit(1720425793.654:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.1.3256" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1125775bd9 code=0x7fc00000 [ 341.169431][ T39] audit: type=1326 audit(1720425793.654:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.1.3256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7fc00000 [ 341.178687][ T39] audit: type=1326 audit(1720425793.654:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.1.3256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7fc00000 [ 341.188369][ T39] audit: type=1326 audit(1720425793.654:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.1.3256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x7fc00000 [ 341.379034][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.388467][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.404388][ T12] bond0 (unregistering): Released all slaves [ 341.756829][T14010] input: syz1 as /devices/virtual/input/input32 [ 341.896655][ T12] hsr_slave_0: left promiscuous mode [ 341.924489][ T12] hsr_slave_1: left promiscuous mode [ 341.946052][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.949300][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.963435][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.966455][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.029867][ T12] veth1_macvtap: left promiscuous mode [ 342.031781][ T12] veth0_macvtap: left promiscuous mode [ 342.035602][ T12] veth1_vlan: left promiscuous mode [ 342.037492][ T12] veth0_vlan: left promiscuous mode [ 342.395641][ T39] audit: type=1326 audit(1720425794.904:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3278" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 342.405794][ T39] audit: type=1326 audit(1720425794.904:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3278" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 342.415075][ T39] audit: type=1326 audit(1720425794.904:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3278" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 342.424883][ T39] audit: type=1326 audit(1720425794.904:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3278" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 342.660763][T14036] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3293'. [ 342.952560][ T5212] Bluetooth: hci3: command tx timeout [ 342.982499][T10671] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 343.162496][T10671] usb 7-1: Using ep0 maxpacket: 16 [ 343.168250][T10671] usb 7-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 343.171909][T10671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.176065][T10671] usb 7-1: Product: syz [ 343.177797][T10671] usb 7-1: Manufacturer: syz [ 343.179811][T10671] usb 7-1: SerialNumber: syz [ 343.186251][T10671] usb 7-1: config 0 descriptor?? [ 343.225334][ T12] team0 (unregistering): Port device team_slave_1 removed [ 343.333862][ T12] team0 (unregistering): Port device team_slave_0 removed [ 344.195435][T10671] usb 7-1: USB disconnect, device number 12 [ 344.254333][T13923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.265158][T13923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.271171][T13923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.278618][T13923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.396577][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.424748][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.434300][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.437478][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.460663][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.464048][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.521702][T13923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.721556][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.790290][T13923] veth0_vlan: entered promiscuous mode [ 344.800863][T13923] veth1_vlan: entered promiscuous mode [ 344.832854][T13923] veth0_macvtap: entered promiscuous mode [ 344.840567][T13923] veth1_macvtap: entered promiscuous mode [ 344.857236][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.861776][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.870947][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.875748][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.879282][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.883576][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.887632][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.892209][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.897577][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.905193][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.911490][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.931479][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.942693][T14060] input: syz1 as /devices/virtual/input/input33 [ 344.942864][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.949726][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.971991][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.976661][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.981285][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.985790][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.990358][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.996284][T13923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.000786][T13923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.026127][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.032425][ T5212] Bluetooth: hci3: command tx timeout [ 345.049276][T13923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.052700][T13923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.055741][T13923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.058722][T13923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.064057][T14062] syzkaller0: entered promiscuous mode [ 345.066197][T14062] syzkaller0: entered allmulticast mode [ 345.150509][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.156377][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.181353][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.186246][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.306340][T14065] team_slave_0: entered allmulticast mode [ 345.594501][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 345.594516][ T39] audit: type=1326 audit(1720425798.104:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14057 comm="syz.2.3300" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 345.617531][ T39] audit: type=1326 audit(1720425798.104:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14057 comm="syz.2.3300" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 345.627958][ T39] audit: type=1326 audit(1720425798.104:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14057 comm="syz.2.3300" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 345.638837][ T39] audit: type=1326 audit(1720425798.104:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14057 comm="syz.2.3300" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 345.750841][ T5212] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 346.466752][T14105] team_slave_0: entered allmulticast mode [ 346.664336][ T39] audit: type=1400 audit(1720425799.174:1161): avc: denied { write } for pid=14106 comm="syz.1.3319" name="renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 347.245082][ T39] audit: type=1326 audit(1720425799.754:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14129 comm="syz.2.3327" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x0 [ 347.940899][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.822357][ T39] audit: type=1400 audit(1720425801.324:1163): avc: denied { getopt } for pid=14141 comm="syz.2.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 348.943009][ T4634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.948782][ T4634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.954389][ T4634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.958930][ T4634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.962861][ T4634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.976969][ T4634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.137972][T14148] chnl_net:caif_netlink_parms(): no params data found [ 349.165514][ T39] audit: type=1326 audit(1720425801.674:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.2.3339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x0 [ 349.211798][T14169] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3341'. [ 349.278865][T14148] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.281779][T14148] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.285038][T14148] bridge_slave_0: entered allmulticast mode [ 349.290855][T14148] bridge_slave_0: entered promiscuous mode [ 349.297642][T14148] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.300493][T14148] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.303375][T14148] bridge_slave_1: entered allmulticast mode [ 349.307539][T14148] bridge_slave_1: entered promiscuous mode [ 349.403768][T14148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.411493][T14148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.642374][T14148] team0: Port device team_slave_0 added [ 349.651491][T14148] team0: Port device team_slave_1 added [ 349.831031][T14148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.834225][T14148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.847479][T14148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.859700][T14148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.863193][T14148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.876193][T14148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.141967][T14148] hsr_slave_0: entered promiscuous mode [ 350.150038][T14148] hsr_slave_1: entered promiscuous mode [ 350.162438][T14148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.165792][T14148] Cannot create hsr debugfs directory [ 350.642166][ T5212] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 350.721369][ T39] audit: type=1400 audit(1720425803.224:1165): avc: denied { read } for pid=14209 comm="syz.1.3356" lport=35323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.724287][ T5212] Bluetooth: Unexpected start frame (len 32) [ 350.805869][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.947703][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.022716][ T5212] Bluetooth: hci3: command tx timeout [ 351.067424][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.325683][ T11] bridge_slave_1: left allmulticast mode [ 351.327725][ T11] bridge_slave_1: left promiscuous mode [ 351.330893][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.345670][ T11] bridge_slave_0: left allmulticast mode [ 351.347653][ T11] bridge_slave_0: left promiscuous mode [ 351.349822][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.886613][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.894422][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.901205][ T11] bond0 (unregistering): Released all slaves [ 352.417163][ T11] hsr_slave_0: left promiscuous mode [ 352.421246][ T11] hsr_slave_1: left promiscuous mode [ 352.424589][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.427745][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.432257][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.436515][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.534492][ T11] veth1_macvtap: left promiscuous mode [ 352.537327][ T11] veth0_macvtap: left promiscuous mode [ 352.539886][ T11] veth1_vlan: left promiscuous mode [ 352.542193][ T11] veth0_vlan: left promiscuous mode [ 353.102669][ T5212] Bluetooth: hci3: command tx timeout [ 353.639266][ T11] team0 (unregistering): Port device team_slave_1 removed [ 353.738587][ T11] team0 (unregistering): Port device team_slave_0 removed [ 354.483413][T14287] netlink: 'syz.2.3390': attribute type 5 has an invalid length. [ 354.536359][T14293] xt_limit: Overflow, try lower: 4294967287/2048 [ 354.621032][T14148] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.639993][T14148] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.653744][T14148] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.666640][T14148] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.774638][T14148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.793260][T14148] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.817725][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.821161][ T4655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.827518][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.830866][ T4655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.914973][T14320] xt_limit: Overflow, try lower: 4294967287/2048 [ 355.045290][T14148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.108808][T14148] veth0_vlan: entered promiscuous mode [ 355.119011][T14148] veth1_vlan: entered promiscuous mode [ 355.148095][T14148] veth0_macvtap: entered promiscuous mode [ 355.165963][T14148] veth1_macvtap: entered promiscuous mode [ 355.182816][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.187268][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.191445][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.192694][ T5212] Bluetooth: hci3: command tx timeout [ 355.197203][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.202118][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.211165][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.217073][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.221518][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.226063][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.230469][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.239579][T14148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.259080][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.272418][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.276711][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.281221][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.292948][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.297626][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.301766][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.311884][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.316496][T14148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.320977][T14148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.329776][T14148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.349902][T14148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.354570][T14148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.359141][T14148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.364954][T14148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.438511][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.441956][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.468281][T14345] xt_limit: Overflow, try lower: 4294967287/2048 [ 355.481853][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.485626][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.930709][ T39] audit: type=1400 audit(1720425809.434:1166): avc: denied { read } for pid=14388 comm="syz.2.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 357.229411][T14400] xt_limit: Overflow, try lower: 4294967287/2048 [ 357.422548][ T5212] Bluetooth: hci5: command tx timeout [ 358.685512][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.502527][ T5212] Bluetooth: hci5: command tx timeout [ 359.818066][ T4634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.825333][ T4634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.828965][ T4634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.833408][ T4634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.844159][ T4634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.847120][ T4634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.069365][T14459] chnl_net:caif_netlink_parms(): no params data found [ 360.221666][T14459] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.226592][T14459] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.230181][T14459] bridge_slave_0: entered allmulticast mode [ 360.235099][T14459] bridge_slave_0: entered promiscuous mode [ 360.242545][T14459] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.245914][T14459] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.249140][T14459] bridge_slave_1: entered allmulticast mode [ 360.253543][T14459] bridge_slave_1: entered promiscuous mode [ 360.338388][T14459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.346289][T14459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.421143][T14459] team0: Port device team_slave_0 added [ 360.428682][T14459] team0: Port device team_slave_1 added [ 360.475495][T14459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.478827][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.489441][T14459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.495511][T14459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.497786][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.507810][T14459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.614718][T14459] hsr_slave_0: entered promiscuous mode [ 360.618789][T14459] hsr_slave_1: entered promiscuous mode [ 361.105656][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.181925][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.273625][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.547491][ T12] bridge_slave_1: left allmulticast mode [ 361.550646][ T12] bridge_slave_1: left promiscuous mode [ 361.554309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.559441][ T12] bridge_slave_0: left allmulticast mode [ 361.569732][ T12] bridge_slave_0: left promiscuous mode [ 361.577701][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.752762][ T5212] Bluetooth: hci5: command tx timeout [ 361.912647][ T5212] Bluetooth: hci3: command tx timeout [ 362.087066][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.106470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.127001][ T12] bond0 (unregistering): Released all slaves [ 362.558250][ T12] hsr_slave_0: left promiscuous mode [ 362.577507][ T12] hsr_slave_1: left promiscuous mode [ 362.597459][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.602254][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.614049][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.616612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.669157][ T12] veth1_macvtap: left promiscuous mode [ 362.671772][ T12] veth0_macvtap: left promiscuous mode [ 362.674700][ T12] veth1_vlan: left promiscuous mode [ 362.676941][ T12] veth0_vlan: left promiscuous mode [ 362.923313][T14551] nbd2: detected capacity change from 0 to 8388607 [ 363.770324][ T12] team0 (unregistering): Port device team_slave_1 removed [ 363.891430][ T12] team0 (unregistering): Port device team_slave_0 removed [ 363.983371][ T4634] Bluetooth: hci3: command tx timeout [ 364.698436][T14570] batman_adv: batadv0: Adding interface: veth0_to_hsr [ 364.701489][T14570] batman_adv: batadv0: The MTU of interface veth0_to_hsr is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.719337][T14570] batman_adv: batadv0: Interface activated: veth0_to_hsr [ 364.767328][T14459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.775956][T14459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.795404][T14459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.809957][T14459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.870700][ T39] audit: type=1400 audit(2000000001.390:1167): avc: denied { write } for pid=14580 comm="syz.1.3499" lport=41417 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 364.885066][ T39] audit: type=1400 audit(2000000001.390:1168): avc: denied { setopt } for pid=14580 comm="syz.1.3499" lport=41417 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 364.901105][T14459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.941256][T14459] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.949098][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.951942][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.973588][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.976457][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.032512][T14589] delete_channel: no stack [ 365.060465][ T39] audit: type=1400 audit(2000000001.580:1169): avc: denied { bind } for pid=14588 comm="syz.1.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.068521][ T39] audit: type=1400 audit(2000000001.590:1170): avc: denied { read } for pid=14588 comm="syz.1.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.145894][T14459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.186390][T14459] veth0_vlan: entered promiscuous mode [ 365.196150][T14459] veth1_vlan: entered promiscuous mode [ 365.225452][T14459] veth0_macvtap: entered promiscuous mode [ 365.231668][T14459] veth1_macvtap: entered promiscuous mode [ 365.247349][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.251516][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.256362][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.260473][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.264422][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.268570][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.272442][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.276546][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.280344][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.287870][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.294183][T14459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.304295][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.308403][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.313269][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.317397][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.321252][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.325456][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.329393][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.333623][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.337441][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.341513][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.347435][T14459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.356067][T14459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.359568][T14459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.363184][T14459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.366635][T14459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.450830][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.458100][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.480926][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.483437][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.744457][T14551] block nbd2: shutting down sockets [ 365.747090][ C2] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.750198][ C2] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.753139][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.758463][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.762066][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.766031][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.768811][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.772663][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.775677][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.778621][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.781270][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.785104][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.788535][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.792842][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.795738][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.799181][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.801703][ T5213] ldm_validate_partition_table(): Disk read failed. [ 365.805012][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.808577][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.811204][ T5213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.814446][ T5213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 365.817112][ T5213] Dev nbd2: unable to read RDB block 0 [ 365.819125][ T5213] nbd2: unable to read partition table [ 365.822953][ T5213] ldm_validate_partition_table(): Disk read failed. [ 365.825540][ T5213] Dev nbd2: unable to read RDB block 0 [ 365.828146][ T5213] nbd2: unable to read partition table [ 366.071482][T14616] delete_channel: no stack [ 366.371931][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 366.732967][T14627] nbd1: detected capacity change from 0 to 8388607 [ 367.988833][T14655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.231344][T14663] netlink: 'syz.3.3532': attribute type 3 has an invalid length. [ 368.236924][T14663] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3532'. [ 368.605144][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.409221][T14627] block nbd1: shutting down sockets [ 369.414897][ T5208] ldm_validate_partition_table(): Disk read failed. [ 369.417677][ T5208] Dev nbd1: unable to read RDB block 0 [ 369.420171][ T5208] nbd1: unable to read partition table [ 369.425584][ T5208] ldm_validate_partition_table(): Disk read failed. [ 369.427955][ T5208] Dev nbd1: unable to read RDB block 0 [ 369.430025][ T5208] nbd1: unable to read partition table [ 369.669345][T14679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3540'. [ 369.680068][T14681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.681921][ T39] audit: type=1400 audit(2000000006.200:1171): avc: denied { append } for pid=14680 comm="syz.2.3539" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 369.699839][T14684] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 369.703654][T14684] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3541'. [ 369.769385][ T4634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.774921][ T4634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.778917][ T4634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.790611][ T4634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.795411][ T4634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 369.799576][ T4634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.865366][T14701] IPVS: length: 373565304 != 24 [ 369.879196][ T39] audit: type=1400 audit(2000000006.400:1172): avc: denied { write } for pid=14700 comm="syz.3.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 369.880924][T14701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14701 comm=syz.3.3548 [ 369.926284][T14695] chnl_net:caif_netlink_parms(): no params data found [ 369.942357][T14699] nbd1: detected capacity change from 0 to 8388607 [ 370.022554][ T2683] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 370.028905][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.032082][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.035603][T14695] bridge_slave_0: entered allmulticast mode [ 370.039606][T14695] bridge_slave_0: entered promiscuous mode [ 370.045147][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.048487][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.051574][T14695] bridge_slave_1: entered allmulticast mode [ 370.055899][T14695] bridge_slave_1: entered promiscuous mode [ 370.117638][T14695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.123350][T14695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.177084][T14695] team0: Port device team_slave_0 added [ 370.182523][T14695] team0: Port device team_slave_1 added [ 370.234266][ T2683] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 370.237999][ T2683] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 370.241460][ T2683] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 370.241951][T14695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.244913][ T2683] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 370.247299][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.251816][ T2683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 370.261550][T14695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.267498][ T2683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 370.271891][T14695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.273448][ T2683] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 370.276609][ T2683] usb 7-1: string descriptor 0 read error: -22 [ 370.282051][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.284665][ T2683] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 370.295114][T14695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.298512][ T2683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.308543][ T2683] usb 7-1: config 0 descriptor?? [ 370.313467][ T2683] hub 7-1:0.0: bad descriptor, ignoring hub [ 370.315805][ T2683] hub 7-1:0.0: probe with driver hub failed with error -5 [ 370.320337][ T2683] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input34 [ 370.372986][T14695] hsr_slave_0: entered promiscuous mode [ 370.384609][T14695] hsr_slave_1: entered promiscuous mode [ 370.387958][T14695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.392593][T14695] Cannot create hsr debugfs directory [ 370.519750][ T2683] usb 7-1: USB disconnect, device number 13 [ 370.631787][ T4634] block nbd1: Receive control failed (result -104) [ 370.631949][T14699] block nbd1: shutting down sockets [ 370.639009][T14707] ldm_validate_partition_table(): Disk read failed. [ 370.645075][T14707] Dev nbd1: unable to read RDB block 0 [ 370.647807][T14707] nbd1: unable to read partition table [ 370.653901][ T5208] ldm_validate_partition_table(): Disk read failed. [ 370.656989][ T5208] Dev nbd1: unable to read RDB block 0 [ 370.659757][ T5208] nbd1: unable to read partition table [ 370.667979][ T5208] ldm_validate_partition_table(): Disk read failed. [ 370.671444][ T5208] Dev nbd1: unable to read RDB block 0 [ 370.674460][ T5208] nbd1: unable to read partition table [ 370.775244][T14717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.813365][T14720] netlink: 'syz.3.3553': attribute type 3 has an invalid length. [ 370.816862][T14720] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3553'. [ 371.161869][T14735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.281229][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.351879][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.392511][ T5275] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 371.401784][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3566'. [ 371.447645][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.583346][ T5275] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 371.587543][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.591359][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.596655][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.601923][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.606458][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.611071][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.615572][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.619325][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.621951][ T56] bridge_slave_1: left allmulticast mode [ 371.624334][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.626514][ T56] bridge_slave_1: left promiscuous mode [ 371.630361][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.631555][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.636241][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.642470][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.646396][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.650070][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.655196][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.659263][ T56] bridge_slave_0: left allmulticast mode [ 371.661695][ T56] bridge_slave_0: left promiscuous mode [ 371.664882][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.667768][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.670917][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.674633][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.679290][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.682387][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.686108][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.689179][ T5275] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 371.692183][ T5275] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 371.696153][ T5275] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.700201][ T5275] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 371.703434][ T5275] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 371.706165][ T5275] usb 8-1: Product: syz [ 371.707606][ T5275] usb 8-1: Manufacturer: syz [ 371.709163][ T5275] usb 8-1: SerialNumber: syz [ 371.711932][ T5275] usb 8-1: config 0 descriptor?? [ 371.718570][ T5275] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 371.822575][ T4634] Bluetooth: hci3: command tx timeout [ 371.956380][ T57] usb 8-1: USB disconnect, device number 11 [ 371.963711][ T57] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 372.068883][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.079699][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.087100][ T56] bond0 (unregistering): Released all slaves [ 372.119870][T14758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.189179][ T39] audit: type=1400 audit(2000000008.710:1173): avc: denied { ioctl } for pid=14764 comm="syz.2.3573" path="socket:[65254]" dev="sockfs" ino=65254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 372.210222][T14765] Context (ID=0x0) not attached to queue pair (handle=0x4d6:0x0) [ 372.422781][ T56] hsr_slave_0: left promiscuous mode [ 372.425249][ T56] hsr_slave_1: left promiscuous mode [ 372.427993][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.431033][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.435203][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.438061][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.488288][ T56] veth1_macvtap: left promiscuous mode [ 372.490909][ T56] veth0_macvtap: left promiscuous mode [ 372.494409][ T56] veth1_vlan: left promiscuous mode [ 372.496850][ T56] veth0_vlan: left promiscuous mode [ 372.499109][T14763] 9pnet: Could not find request transport: ^d [ 372.556410][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'. [ 373.474553][ T56] team0 (unregistering): Port device team_slave_1 removed [ 373.573747][ T56] team0 (unregistering): Port device team_slave_0 removed [ 373.912414][ T4634] Bluetooth: hci3: command tx timeout [ 374.332896][T14763] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 374.400449][T14695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.404225][T14789] Context (ID=0x0) not attached to queue pair (handle=0x4d6:0x0) [ 374.415086][T14695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.424497][T14695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.439137][T14695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.453611][ T39] audit: type=1326 audit(2000000010.980:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14795 comm="syz.2.3585" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x0 [ 374.469203][T14798] IPVS: length: 373565304 != 24 [ 374.528217][T14798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14798 comm=syz.3.3586 [ 374.563881][T14695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.588617][T14695] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.597966][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.601042][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.615086][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.618224][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.775255][T14695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.815057][T14695] veth0_vlan: entered promiscuous mode [ 374.823490][T14695] veth1_vlan: entered promiscuous mode [ 374.846402][T14695] veth0_macvtap: entered promiscuous mode [ 374.852469][T14695] veth1_macvtap: entered promiscuous mode [ 374.864006][ T58] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 374.866182][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.871405][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.876724][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.880610][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.884416][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.888399][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.892081][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.896234][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.899923][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.904018][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.909663][T14695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.921067][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.928796][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.933369][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.937273][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.940975][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.946318][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.950137][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.954410][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.958114][T14695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.962024][T14695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.969268][T14695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.978504][T14695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.981819][T14695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.985204][T14695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.988551][T14695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.053208][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.053308][ T58] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 375.055913][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.064388][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.070786][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.075595][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.079667][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.083611][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.086254][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.088112][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.091307][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.095976][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.100610][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.104931][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.108220][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.111721][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.116119][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.119530][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.123263][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.127217][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.131019][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.134655][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.138837][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.154515][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.158204][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.162040][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.166149][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.169626][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.173922][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 375.179918][ T58] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 375.183325][ T58] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 375.186404][ T58] usb 8-1: Product: syz [ 375.187838][ T58] usb 8-1: Manufacturer: syz [ 375.189427][ T58] usb 8-1: SerialNumber: syz [ 375.192523][ T58] usb 8-1: config 0 descriptor?? [ 375.198732][ T58] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 375.334883][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'. [ 375.425060][ T58] usb 8-1: USB disconnect, device number 12 [ 375.432137][ T58] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 375.452648][T14812] nbd2: detected capacity change from 0 to 8388607 [ 376.154924][ T4634] block nbd2: Receive control failed (result -104) [ 376.158509][T14812] block nbd2: shutting down sockets [ 376.171178][ C3] blk_print_req_error: 108 callbacks suppressed [ 376.171192][ C3] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.177765][ C3] buffer_io_error: 105 callbacks suppressed [ 376.177775][ C3] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.183892][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.187407][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.190661][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.202510][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.205924][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.209804][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.213557][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.216746][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.219794][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.224237][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.226947][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.230381][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.233823][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.237390][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.240342][ T5208] ldm_validate_partition_table(): Disk read failed. [ 376.243068][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.246540][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.250007][ T5208] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.253832][ T5208] Buffer I/O error on dev nbd2, logical block 0, async page read [ 376.256927][ T5208] Dev nbd2: unable to read RDB block 0 [ 376.259014][ T5208] nbd2: unable to read partition table [ 376.263557][ T5208] ldm_validate_partition_table(): Disk read failed. [ 376.266709][ T5208] Dev nbd2: unable to read RDB block 0 [ 376.269601][ T5208] nbd2: unable to read partition table [ 376.309777][ T39] audit: type=1326 audit(2000000012.830:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.1.3598" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1125775bd9 code=0x0 [ 376.313976][T14818] 9pnet: Could not find request transport: ^d [ 376.336478][T14818] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 376.612418][ T57] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 376.793141][ T57] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 376.797914][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.801816][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.806658][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.810800][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.814136][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.817682][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.820611][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.824210][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.828200][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.831153][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.834379][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.838021][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.841132][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.844532][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.848780][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.851753][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.855473][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.859078][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.863107][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.866660][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.879716][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.887053][ T57] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.891118][ T57] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.895694][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.900741][ T57] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 376.904492][ T57] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 376.907453][ T57] usb 7-1: Product: syz [ 376.908850][ T57] usb 7-1: Manufacturer: syz [ 376.910418][ T57] usb 7-1: SerialNumber: syz [ 376.913792][ T57] usb 7-1: config 0 descriptor?? [ 376.919981][ T57] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 377.061941][ T39] audit: type=1326 audit(2000000013.580:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14839 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e3d75bd9 code=0x7fc00000 [ 377.072414][ T39] audit: type=1326 audit(2000000013.590:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14839 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f68e3d75bd9 code=0x7fc00000 [ 377.081746][ T39] audit: type=1326 audit(2000000013.600:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14839 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e3d75bd9 code=0x7fc00000 [ 377.091432][ T39] audit: type=1326 audit(2000000013.600:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14839 comm="syz.3.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e3d75bd9 code=0x7fc00000 [ 377.161538][ T5248] usb 7-1: USB disconnect, device number 14 [ 377.168472][ T5248] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 377.194653][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'. [ 377.785372][T14859] 9pnet: Could not find request transport: ^d [ 377.837062][ T39] audit: type=1326 audit(2000000014.360:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 377.848457][ T39] audit: type=1326 audit(2000000014.360:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 377.860449][ T39] audit: type=1326 audit(2000000014.380:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 377.871710][ T39] audit: type=1326 audit(2000000014.380:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 377.901804][ T39] audit: type=1326 audit(2000000014.380:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.3610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1263975bd9 code=0x7fc00000 [ 378.086159][ T4634] Bluetooth: hci5: link tx timeout [ 378.092416][ T4634] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 378.098637][ T4634] Bluetooth: hci5: link tx timeout [ 378.100633][ T4634] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 378.236531][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.242472][ T57] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 378.442369][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 378.445492][ T57] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 378.448521][ T57] usb 7-1: config 0 has no interface number 0 [ 378.451215][ T57] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.457885][ T57] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.464223][ T57] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 378.468076][ T57] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 378.471232][ T57] usb 7-1: Product: syz [ 378.472716][ T57] usb 7-1: SerialNumber: syz [ 378.480491][ T57] usb 7-1: config 0 descriptor?? [ 378.488845][ T57] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 378.492854][ T57] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input35 [ 378.746145][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.746358][ T824] usb 7-1: USB disconnect, device number 15 [ 378.749104][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 378.756848][ T824] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 379.445689][T14894] IPVS: length: 373565304 != 24 [ 379.448327][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'. [ 379.489769][T14894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14894 comm=syz.1.3622 [ 379.507366][T14898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.513840][T14898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.517801][T14898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.524835][T14898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.532587][T14898] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.535780][T14898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.673767][T14896] chnl_net:caif_netlink_parms(): no params data found [ 379.797030][T14896] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.799901][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.802637][T14896] bridge_slave_0: entered allmulticast mode [ 379.806743][T14896] bridge_slave_0: entered promiscuous mode [ 379.811418][T14896] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.815971][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.818438][T14896] bridge_slave_1: entered allmulticast mode [ 379.823563][T14896] bridge_slave_1: entered promiscuous mode [ 379.891842][T14896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.903792][T14896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.982028][T14896] team0: Port device team_slave_0 added [ 379.987032][T14896] team0: Port device team_slave_1 added [ 380.040421][T14896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.045445][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.055125][T14896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.073714][T14896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.079271][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.079330][T14918] 9pnet: Could not find request transport: ^d [ 380.092537][T14896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.142555][ T4634] Bluetooth: hci5: command 0x0406 tx timeout [ 380.225560][T14896] hsr_slave_0: entered promiscuous mode [ 380.228640][T14896] hsr_slave_1: entered promiscuous mode [ 380.492390][ T2683] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 380.682405][ T2683] usb 8-1: Using ep0 maxpacket: 16 [ 380.687217][ T2683] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 380.690612][ T2683] usb 8-1: config 0 has no interface number 0 [ 380.696849][ T2683] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.725927][ T2683] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.733409][ T2683] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 380.736493][ T2683] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 380.739190][ T2683] usb 8-1: Product: syz [ 380.740611][ T2683] usb 8-1: SerialNumber: syz [ 380.750033][ T2683] usb 8-1: config 0 descriptor?? [ 380.770204][ T2683] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 380.777301][ T2683] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input36 [ 381.146220][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.164933][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.168370][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.170839][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.173523][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.176174][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.179252][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.182348][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.184803][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.187668][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.201689][ T2683] usb 8-1: USB disconnect, device number 13 [ 381.204158][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 381.208775][ T2683] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 381.253561][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.368251][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.518948][T14955] netlink: 'syz.2.3641': attribute type 10 has an invalid length. [ 381.592662][ T5212] Bluetooth: hci3: command tx timeout [ 381.611702][T14955] bridge0: port 3(hsr0) entered disabled state [ 381.614780][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.617668][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.630338][T14962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14962 comm=syz.2.3641 [ 381.636371][T14962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40693 sclass=netlink_route_socket pid=14962 comm=syz.2.3641 [ 381.668783][T14964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3644'. [ 381.736685][T14955] bridge_slave_0: left allmulticast mode [ 381.738902][T14955] bridge_slave_0: left promiscuous mode [ 381.741332][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.766798][T14955] bridge_slave_1: left allmulticast mode [ 381.769447][T14955] bridge_slave_1: left promiscuous mode [ 381.772099][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.795973][T14955] bond0: (slave bond_slave_0): Releasing backup interface [ 381.817251][T14955] bond0: (slave bond_slave_1): Releasing backup interface [ 381.843600][T14955] team0: Port device team_slave_0 removed [ 381.873015][T14955] team0: Port device team_slave_1 removed [ 381.884352][T14955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.902691][T14955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.913649][T14955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.926110][T14955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.979239][T14955] hsr0: left allmulticast mode [ 381.982891][T14955] hsr_slave_0: left allmulticast mode [ 381.985263][T14955] hsr_slave_1: left allmulticast mode [ 381.987486][T14955] hsr0: left promiscuous mode [ 381.989712][T14955] bridge0: port 3(hsr0) entered disabled state [ 382.035263][T14975] trusted_key: encrypted_key: keyword 'new¸' not recognized [ 382.122872][T14955] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.126427][T14955] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.130095][T14955] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.133986][T14955] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.215170][ T56] bridge_slave_1: left allmulticast mode [ 382.217656][ T56] bridge_slave_1: left promiscuous mode [ 382.220131][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.244090][ T56] bridge_slave_0: left allmulticast mode [ 382.246611][ T56] bridge_slave_0: left promiscuous mode [ 382.249268][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.650953][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.660017][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.666209][ T56] bond0 (unregistering): Released all slaves [ 383.067320][T14999] trusted_key: encrypted_key: keyword 'new¸' not recognized [ 383.071740][T14996] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 383.149563][ T56] hsr_slave_0: left promiscuous mode [ 383.153815][ T56] hsr_slave_1: left promiscuous mode [ 383.165731][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.168884][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.174238][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.177519][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.230165][ T56] veth1_macvtap: left promiscuous mode [ 383.232838][ T56] veth0_macvtap: left promiscuous mode [ 383.235451][ T56] veth1_vlan: left promiscuous mode [ 383.237731][ T56] veth0_vlan: left promiscuous mode [ 383.429739][T15001] 9pnet: Could not find request transport: ^d [ 383.672490][ T5212] Bluetooth: hci3: command tx timeout [ 383.809576][T15026] trusted_key: encrypted_key: keyword 'new¸' not recognized [ 384.243008][ T56] team0 (unregistering): Port device team_slave_1 removed [ 384.317522][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.370460][ T56] team0 (unregistering): Port device team_slave_0 removed [ 385.078769][T15028] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 385.172004][T14896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.178331][T14896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.193691][T14896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.224416][T14896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.337798][T14896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.366222][T14896] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.381005][ T2683] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.383684][ T2683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.408245][ T2683] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.411421][ T2683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.489117][T14896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.658079][T14896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.704207][T14896] veth0_vlan: entered promiscuous mode [ 385.721858][T14896] veth1_vlan: entered promiscuous mode [ 385.722687][T15065] Bluetooth: MGMT ver 1.22 [ 385.749238][ T5212] Bluetooth: hci3: command tx timeout [ 385.774434][T14896] veth0_macvtap: entered promiscuous mode [ 385.781373][T14896] veth1_macvtap: entered promiscuous mode [ 385.799498][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.804268][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.809009][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.814381][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.818469][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.822816][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.827085][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.830566][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.835139][T14896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.848240][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.853017][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.857257][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.861833][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.867105][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.871642][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.878645][T14896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.890160][T14896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.896360][T14896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.904330][T14896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.908238][T14896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.912026][T14896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.915943][T14896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.002193][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.005658][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.036295][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.038941][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.497459][T15097] mkiss: ax0: crc mode is auto. [ 386.909131][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3703'. [ 386.958721][T15118] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 387.097363][T15121] mkiss: ax0: crc mode is auto. [ 388.025218][T15144] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 388.887523][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 389.099901][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.536804][ T4634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.545066][ T4634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.551408][ T4634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.555832][ T4634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.559650][ T4634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 390.563411][ T4634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.785511][T15193] chnl_net:caif_netlink_parms(): no params data found [ 390.889779][T15193] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.893367][T15193] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.896536][T15193] bridge_slave_0: entered allmulticast mode [ 390.900456][T15193] bridge_slave_0: entered promiscuous mode [ 390.909099][T15193] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.912107][T15193] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.915113][T15193] bridge_slave_1: entered allmulticast mode [ 390.918855][T15193] bridge_slave_1: entered promiscuous mode [ 390.993322][T15193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.000756][T15193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.072696][T15193] team0: Port device team_slave_0 added [ 391.082890][T15193] team0: Port device team_slave_1 added [ 391.152223][T15193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.157205][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.170292][T15193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.176268][T15193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.179135][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.189487][T15193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.250249][T15193] hsr_slave_0: entered promiscuous mode [ 391.254442][T15193] hsr_slave_1: entered promiscuous mode [ 391.259725][T15193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.272409][T15193] Cannot create hsr debugfs directory [ 391.556234][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.744419][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.766657][T15242] sp0: Synchronizing with TNC [ 391.834123][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.035606][ T10] IPVS: starting estimator thread 0... [ 392.054075][ T11] bridge_slave_1: left allmulticast mode [ 392.056759][ T11] bridge_slave_1: left promiscuous mode [ 392.059492][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.067466][ T11] bridge_slave_0: left allmulticast mode [ 392.069989][ T11] bridge_slave_0: left promiscuous mode [ 392.074877][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.122424][T15259] IPVS: using max 36 ests per chain, 86400 per kthread [ 392.299455][T15274] sd 0:0:0:0: PR command failed: 1026 [ 392.301287][T15274] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 392.303871][T15274] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 392.509465][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.516698][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.523262][ T11] bond0 (unregistering): Released all slaves [ 392.554370][T15280] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.558786][T15280] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.563013][T15280] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.566778][T15280] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.571006][T15280] vxlan0: entered promiscuous mode [ 392.575262][T15280] vxlan0: entered allmulticast mode [ 392.580514][T15280] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.585208][T15280] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.589088][T15280] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.593369][T15280] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.626471][ T4634] Bluetooth: hci3: command tx timeout [ 392.963895][T15289] sp0: Synchronizing with TNC [ 392.997883][ T11] hsr_slave_0: left promiscuous mode [ 393.000729][ T11] hsr_slave_1: left promiscuous mode [ 393.003162][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.006174][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.010097][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.018874][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.079170][ T11] veth1_macvtap: left promiscuous mode [ 393.081599][ T11] veth0_macvtap: left promiscuous mode [ 393.084151][ T11] veth1_vlan: left promiscuous mode [ 393.086380][ T11] veth0_vlan: left promiscuous mode [ 394.240747][ T11] team0 (unregistering): Port device team_slave_1 removed [ 394.349418][ T11] team0 (unregistering): Port device team_slave_0 removed [ 394.712428][ T4634] Bluetooth: hci3: command tx timeout [ 395.173266][T15193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.180128][T15193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.186793][T15193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.196347][T15193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.242226][T15326] pim6reg: entered allmulticast mode [ 395.293108][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.310026][T15193] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.317015][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.319392][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.338098][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.340613][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.388316][T15193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.536706][T15193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.568054][T15193] veth0_vlan: entered promiscuous mode [ 395.575821][T15193] veth1_vlan: entered promiscuous mode [ 395.597441][T15193] veth0_macvtap: entered promiscuous mode [ 395.604192][T15193] veth1_macvtap: entered promiscuous mode [ 395.620365][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.625111][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.628897][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.633298][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.641153][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.645834][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.649556][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.654176][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.659131][T15193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.668745][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.672518][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.675876][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.679388][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.683576][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.687037][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.690695][T15193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.694820][T15193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.700577][T15193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.707934][T15193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.711361][T15193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.715493][T15193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.718595][T15193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.784076][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.786879][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.812099][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.815466][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.843322][T15357] ------------[ cut here ]------------ [ 395.845759][T15357] WARNING: CPU: 1 PID: 15357 at kernel/workqueue.c:2282 __queue_work+0xc13/0x1020 [ 395.848890][T15357] Modules linked in: [ 395.850302][T15357] CPU: 1 PID: 15357 Comm: syz.2.3786 Not tainted 6.10.0-rc7-syzkaller #0 [ 395.855020][T15357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 395.858650][T15357] RIP: 0010:__queue_work+0xc13/0x1020 [ 395.860519][T15357] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 76 07 91 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 d7 3f 35 00 85 db 75 2a e8 ce 44 35 00 90 <0f> 0b 90 e9 4d f9 ff ff e8 c0 44 35 00 90 0f 0b 90 e9 fc f8 ff ff [ 395.867331][T15357] RSP: 0018:ffffc900034677a0 EFLAGS: 00010046 [ 395.869385][T15357] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90005fc7000 [ 395.872140][T15357] RDX: 0000000000040000 RSI: ffffffff81589fc2 RDI: 0000000000000005 [ 395.874855][T15357] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 395.877489][T15357] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803e9b0b18 [ 395.880203][T15357] R13: 0000000000000008 R14: ffff88802542c000 R15: ffff88802542c000 [ 395.883646][T15357] FS: 00007f12647176c0(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 [ 395.886797][T15357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.889100][T15357] CR2: 0000001b3260aff8 CR3: 0000000052286000 CR4: 0000000000352ef0 [ 395.891827][T15357] Call Trace: [ 395.893009][T15357] [ 395.894019][T15357] ? show_regs+0x8c/0xa0 [ 395.895554][T15357] ? __warn+0xe5/0x3c0 [ 395.897056][T15357] ? __queue_work+0xc13/0x1020 [ 395.899044][T15357] ? report_bug+0x3c0/0x580 [ 395.900982][T15357] ? handle_bug+0x3d/0x70 [ 395.902683][T15357] ? exc_invalid_op+0x17/0x50 [ 395.904426][T15357] ? asm_exc_invalid_op+0x1a/0x20 [ 395.906308][T15357] ? __queue_work+0xc12/0x1020 [ 395.907931][T15357] ? __queue_work+0xc13/0x1020 [ 395.909513][T15357] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 395.911433][T15357] ? rcu_is_watching+0x12/0xc0 [ 395.912854][T15357] queue_work_on+0x11a/0x140 [ 395.914377][T15357] l2cap_chan_send+0xb86/0x2a20 [ 395.916005][T15357] ? trace_contention_end+0xea/0x140 [ 395.917738][T15357] ? find_held_lock+0x59/0x110 [ 395.919339][T15357] ? __pfx_l2cap_chan_send+0x10/0x10 [ 395.921061][T15357] ? l2cap_sock_sendmsg+0x1a4/0x300 [ 395.922783][T15357] l2cap_sock_sendmsg+0x228/0x300 [ 395.924443][T15357] ____sys_sendmsg+0xab5/0xc90 [ 395.926015][T15357] ? copy_msghdr_from_user+0x10b/0x160 [ 395.927820][T15357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.929574][T15357] ? __lock_acquire+0x14f4/0x3b30 [ 395.931203][T15357] ___sys_sendmsg+0x135/0x1e0 [ 395.932848][T15357] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.934765][T15357] ? __pfx___might_resched+0x10/0x10 [ 395.936848][T15357] ? __might_fault+0xe3/0x190 [ 395.938503][T15357] __sys_sendmmsg+0x1a1/0x450 [ 395.940069][T15357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 395.941878][T15357] ? __pfx_do_futex+0x10/0x10 [ 395.943553][T15357] ? fput+0x32/0x390 [ 395.944962][T15357] ? xfd_validate_state+0x5d/0x180 [ 395.946804][T15357] __x64_sys_sendmmsg+0x9c/0x100 [ 395.948464][T15357] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.950410][T15357] do_syscall_64+0xcd/0x250 [ 395.952326][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.954610][T15357] RIP: 0033:0x7f1263975bd9 [ 395.956250][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.963215][T15357] RSP: 002b:00007f1264717048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 395.966147][T15357] RAX: ffffffffffffffda RBX: 00007f1263b04038 RCX: 00007f1263975bd9 [ 395.968828][T15357] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000005 [ 395.971473][T15357] RBP: 00007f12639e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 395.974224][T15357] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 395.976983][T15357] R13: 000000000000006e R14: 00007f1263b04038 R15: 00007fffd761f1a8 [ 395.979766][T15357] [ 395.980928][T15357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.983296][T15357] CPU: 1 PID: 15357 Comm: syz.2.3786 Not tainted 6.10.0-rc7-syzkaller #0 [ 395.986083][T15357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 395.989618][T15357] Call Trace: [ 395.990811][T15357] [ 395.991830][T15357] dump_stack_lvl+0x3d/0x1f0 [ 395.993765][T15357] panic+0x6f5/0x7a0 [ 395.995520][T15357] ? __pfx_panic+0x10/0x10 [ 395.997532][T15357] ? show_trace_log_lvl+0x363/0x500 [ 395.999371][T15357] ? __queue_work+0xc13/0x1020 [ 396.000998][T15357] check_panic_on_warn+0xab/0xb0 [ 396.002811][T15357] __warn+0xf1/0x3c0 [ 396.004374][T15357] ? __queue_work+0xc13/0x1020 [ 396.006207][T15357] report_bug+0x3c0/0x580 [ 396.007697][T15357] handle_bug+0x3d/0x70 [ 396.009141][T15357] exc_invalid_op+0x17/0x50 [ 396.010712][T15357] asm_exc_invalid_op+0x1a/0x20 [ 396.012338][T15357] RIP: 0010:__queue_work+0xc13/0x1020 [ 396.014752][T15357] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 76 07 91 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 d7 3f 35 00 85 db 75 2a e8 ce 44 35 00 90 <0f> 0b 90 e9 4d f9 ff ff e8 c0 44 35 00 90 0f 0b 90 e9 fc f8 ff ff [ 396.021537][T15357] RSP: 0018:ffffc900034677a0 EFLAGS: 00010046 [ 396.023759][T15357] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90005fc7000 [ 396.026380][T15357] RDX: 0000000000040000 RSI: ffffffff81589fc2 RDI: 0000000000000005 [ 396.029027][T15357] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 396.031682][T15357] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803e9b0b18 [ 396.034519][T15357] R13: 0000000000000008 R14: ffff88802542c000 R15: ffff88802542c000 [ 396.037142][T15357] ? __queue_work+0xc12/0x1020 [ 396.038734][T15357] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 396.040768][T15357] ? rcu_is_watching+0x12/0xc0 [ 396.042372][T15357] queue_work_on+0x11a/0x140 [ 396.043908][T15357] l2cap_chan_send+0xb86/0x2a20 [ 396.045540][T15357] ? trace_contention_end+0xea/0x140 [ 396.047336][T15357] ? find_held_lock+0x59/0x110 [ 396.048964][T15357] ? __pfx_l2cap_chan_send+0x10/0x10 [ 396.050770][T15357] ? l2cap_sock_sendmsg+0x1a4/0x300 [ 396.052503][T15357] l2cap_sock_sendmsg+0x228/0x300 [ 396.054169][T15357] ____sys_sendmsg+0xab5/0xc90 [ 396.055799][T15357] ? copy_msghdr_from_user+0x10b/0x160 [ 396.057597][T15357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.059372][T15357] ? __lock_acquire+0x14f4/0x3b30 [ 396.060971][T15357] ___sys_sendmsg+0x135/0x1e0 [ 396.062457][T15357] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.064258][T15357] ? __pfx___might_resched+0x10/0x10 [ 396.066497][T15357] ? __might_fault+0xe3/0x190 [ 396.068304][T15357] __sys_sendmmsg+0x1a1/0x450 [ 396.069979][T15357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 396.071775][T15357] ? __pfx_do_futex+0x10/0x10 [ 396.073350][T15357] ? fput+0x32/0x390 [ 396.074681][T15357] ? xfd_validate_state+0x5d/0x180 [ 396.076361][T15357] __x64_sys_sendmmsg+0x9c/0x100 [ 396.078019][T15357] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.079759][T15357] do_syscall_64+0xcd/0x250 [ 396.081358][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.083797][T15357] RIP: 0033:0x7f1263975bd9 [ 396.085586][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.093072][T15357] RSP: 002b:00007f1264717048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 396.096459][T15357] RAX: ffffffffffffffda RBX: 00007f1263b04038 RCX: 00007f1263975bd9 [ 396.099702][T15357] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000005 [ 396.102458][T15357] RBP: 00007f12639e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 396.105126][T15357] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 396.107758][T15357] R13: 000000000000006e R14: 00007f1263b04038 R15: 00007fffd761f1a8 [ 396.110410][T15357] [ 396.112021][T15357] Kernel Offset: disabled [ 396.113577][T15357] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:00:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000040000 RBX=ffff88806b144900 RCX=ffffc900059c4000 RDX=0000000000040000 RSI=ffffffff8181ac45 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003787270 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d628921 R13=0000000000000001 R14=ffff88806b144908 R15=ffff88806b03fd80 RIP=ffffffff8181ac47 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f12647386c0 ffffffff 00c01300 GS =0000 ffff88806b000000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002033c000 CR3=0000000052286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8159bbe7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1263ad4488 00007f1263ad4480 00007f1263ad4478 00007f1263ad4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f126463d100 00007f1263ad4440 00007f1263ad4458 00007f1263ad44a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1263ad4498 00007f1263ad4490 00007f1263ad4488 00007f1263ad4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fd2ac5 RDI=ffffffff94dd71a0 RBP=ffffffff94dd7160 RSP=ffffc90003467190 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=000000000000002e R14=ffffffff84fd2a60 R15=0000000000000000 RIP=ffffffff84fd2aef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f12647176c0 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3260aff8 CR3=0000000052286000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8132f425 ffffffff8132f39d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff815748d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12639e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813e32fa ffffffff813e3246 ffffffff813e3120 ffffffff813e30fd ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f126463d100 00007f1263ad4440 00007f1200040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1263ad4498 00007f1263ad4490 00007f1263ad4488 00007f1263ad4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8ffcc214 RCX=ffffffff813ccc24 RDX=ffff88802ebf8000 RSI=ffffffff813ccbd0 RDI=0000000000000006 RBP=ffffffff8ffcc214 RSP=ffffc9000350f788 R8 =0000000000000006 R9 =ffffffff81e972f6 R10=ffffffff81e9720b R11=0000000000000000 R12=ffffffff81e972f6 R13=ffffffff81e9720b R14=dffffc0000000000 R15=ffffffff8ffcc210 RIP=ffffffff818de490 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558f1a9500 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd8ef1e3490 CR3=0000000045490000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81326b48 ffffffff81326b48 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81326b48 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e3de4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e3de4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e3de432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e3de4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e3de43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68e3de44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8159bc9b ffffffff8159bc2f ffffffff8159bbe7 ffffffff8132f425 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84b1cc29 ffffffff8482a3e8 ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8482a39d ffffffff8482a389 ffffffff8482a36b ffffffff8482a35a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=2e575cb3ee154f7a RCX=ffffc9000161fb18 RDX=1ffff11003766a6a RSI=ffffffff8b2cb1e0 RDI=ffffffff8b8ff600 RBP=1ffff920002c3f5b RSP=ffffc9000161fac8 R8 =0000000000000000 R9 =fffffbfff1fc86e2 R10=ffffffff8fe43717 R11=0000000000000002 R12=0000000000000002 R13=0000000000000003 R14=ffff88801bb35358 R15=ffff88801bb34880 RIP=ffffffff816bd0ca RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe2c02d660 CR3=0000000043d42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800008 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3e335f30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11257e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11257e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11257e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11257e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11257e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11257e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000