last executing test programs: 24.219145357s ago: executing program 1 (id=539): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) tkill(r0, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r3, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000100)='\v\x00\x00\x00', 0x4}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 21.955956838s ago: executing program 1 (id=587): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1f, &(0x7f0000000140)=[&(0x7f0000323000/0x2000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000001500), 0x0) 21.693921733s ago: executing program 1 (id=588): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x0, 0x35315241}}) 21.542750211s ago: executing program 1 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 21.303674007s ago: executing program 1 (id=590): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), 0xffffffffffffffff) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002000)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000001fc0)=ANY=[@ANYBLOB='B\x00\x00\x00\a'], 0x42) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) 19.040871255s ago: executing program 1 (id=591): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r2, @ANYBLOB="2c646f6e745f4d2935027572652c6f626ae52c62a843a45f747970653d2f2c6b"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(0x0, 0x64041, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) 6.580774344s ago: executing program 0 (id=615): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 5.124324856s ago: executing program 0 (id=621): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="41e53d9ac4df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 5.087320965s ago: executing program 2 (id=623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x128, 0x2b8, 0x182, 0x0, 0x0, 0x1ec, 0x3a8, 0x3a8, 0x1ec, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x128, 0x0, {0x0, 0x1800}, [@common=@unspec=@limit={{0x3c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) 4.82941838s ago: executing program 2 (id=624): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r5, r4, 0x0, 0x80009) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 1.613610777s ago: executing program 0 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, 0x0, 0x4044081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x10, 0x0, 0x0, @empty, @local, {[@dstopts={0x0, 0x0, '\x00', [@ra]}]}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x280}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) close(r5) 1.373421489s ago: executing program 3 (id=630): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x0, 0xc) 1.223308939s ago: executing program 3 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 1.100304555s ago: executing program 2 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b4, 0x128, 0x2b8, 0x182, 0x0, 0x0, 0x1ec, 0x3a8, 0x3a8, 0x1ec, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x128, 0x0, {0x0, 0x1800}, [@common=@unspec=@limit={{0x3c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x310) 962.599776ms ago: executing program 2 (id=633): setrlimit(0x8, &(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 961.632336ms ago: executing program 3 (id=634): creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xf800) 798.599473ms ago: executing program 0 (id=635): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_uring_enter(r0, 0x45e0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 668.250486ms ago: executing program 2 (id=636): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000040)) 668.103839ms ago: executing program 3 (id=637): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 448.244042ms ago: executing program 0 (id=638): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000100)=0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = fcntl$dupfd(r2, 0x0, r2) connect$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 327.565751ms ago: executing program 3 (id=639): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x70, 0x0, &(0x7f0000001080)) 156.696485ms ago: executing program 3 (id=640): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x1, "421ae3ec9d85259249154c94411201003ff4273bf000da5d8f0e0000818cfc0e", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af800000000f3c49e4906eddfec20e8a1c3ed8fce61dd00000000000200", r2}) 143.870166ms ago: executing program 2 (id=641): mount$9p_virtio(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000740)={'trans=virtio,', {[{@noextend}]}}) 0s ago: executing program 0 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60257' (ED25519) to the list of known hosts. syzkaller login: [ 103.788320][ T5210] cgroup: Unknown subsys name 'net' [ 103.958666][ T5210] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.891372][ T5210] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.598193][ T42] cfg80211: failed to load regulatory.db [ 121.211283][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.291903][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.313055][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.346988][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.352150][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.358099][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.363435][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.370082][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.412085][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.418504][ T4649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.422452][ T4649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.428709][ T4649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.435591][ T4649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.442655][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.444067][ T5253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.447486][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.465935][ T5253] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.470554][ T5253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.471641][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.483391][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.485632][ T5253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.490830][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.500223][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.535961][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.195874][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 122.707442][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 122.830617][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 122.925892][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.929385][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.933269][ T5241] bridge_slave_0: entered allmulticast mode [ 122.941087][ T5241] bridge_slave_0: entered promiscuous mode [ 123.053945][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.061136][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.065368][ T5241] bridge_slave_1: entered allmulticast mode [ 123.076928][ T5241] bridge_slave_1: entered promiscuous mode [ 123.477381][ T5249] Bluetooth: hci0: command tx timeout [ 123.580501][ T5249] Bluetooth: hci1: command tx timeout [ 123.583094][ T5249] Bluetooth: hci2: command tx timeout [ 123.669990][ T5249] Bluetooth: hci3: command tx timeout [ 123.712159][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 123.850235][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.863957][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.867278][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.870342][ T5247] bridge_slave_0: entered allmulticast mode [ 123.873969][ T5247] bridge_slave_0: entered promiscuous mode [ 124.007332][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.052718][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.055272][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.058210][ T5247] bridge_slave_1: entered allmulticast mode [ 124.073232][ T5247] bridge_slave_1: entered promiscuous mode [ 124.111965][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.115937][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.120003][ T5244] bridge_slave_0: entered allmulticast mode [ 124.126380][ T5244] bridge_slave_0: entered promiscuous mode [ 124.132567][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.137881][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.142493][ T5244] bridge_slave_1: entered allmulticast mode [ 124.151377][ T5244] bridge_slave_1: entered promiscuous mode [ 124.512170][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.619649][ T5241] team0: Port device team_slave_0 added [ 124.657094][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.850658][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.932450][ T5241] team0: Port device team_slave_1 added [ 125.191863][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.462250][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.467204][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.474909][ T5248] bridge_slave_0: entered allmulticast mode [ 125.490632][ T5248] bridge_slave_0: entered promiscuous mode [ 125.500748][ T5247] team0: Port device team_slave_0 added [ 125.529368][ T5247] team0: Port device team_slave_1 added [ 125.555916][ T5249] Bluetooth: hci0: command tx timeout [ 125.606979][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.610816][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.629082][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.638524][ T5249] Bluetooth: hci2: command tx timeout [ 125.645716][ T5249] Bluetooth: hci1: command tx timeout [ 125.668821][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.671683][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.676113][ T5248] bridge_slave_1: entered allmulticast mode [ 125.680701][ T5248] bridge_slave_1: entered promiscuous mode [ 125.719880][ T5249] Bluetooth: hci3: command tx timeout [ 125.845950][ T5244] team0: Port device team_slave_0 added [ 125.849546][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.852615][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.878334][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.006734][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.014660][ T5244] team0: Port device team_slave_1 added [ 126.134374][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.275860][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.278595][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.293433][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.463078][ T5248] team0: Port device team_slave_0 added [ 126.499033][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.512215][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.585423][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.611889][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.615033][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.642050][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.729163][ T5241] hsr_slave_0: entered promiscuous mode [ 126.770252][ T5241] hsr_slave_1: entered promiscuous mode [ 126.851615][ T5248] team0: Port device team_slave_1 added [ 126.949599][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.953120][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.994218][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.283198][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.287615][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.324797][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.429789][ T5247] hsr_slave_0: entered promiscuous mode [ 127.496063][ T5247] hsr_slave_1: entered promiscuous mode [ 127.508813][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.514084][ T5247] Cannot create hsr debugfs directory [ 127.606069][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.609739][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.645922][ T5249] Bluetooth: hci0: command tx timeout [ 127.653114][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.727885][ T5249] Bluetooth: hci1: command tx timeout [ 127.729084][ T5243] Bluetooth: hci2: command tx timeout [ 127.799612][ T5243] Bluetooth: hci3: command tx timeout [ 128.399963][ T5248] hsr_slave_0: entered promiscuous mode [ 128.418133][ T5248] hsr_slave_1: entered promiscuous mode [ 128.432641][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.436687][ T5248] Cannot create hsr debugfs directory [ 128.533582][ T5244] hsr_slave_0: entered promiscuous mode [ 128.547632][ T5244] hsr_slave_1: entered promiscuous mode [ 128.550884][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.576492][ T5244] Cannot create hsr debugfs directory [ 129.742163][ T5243] Bluetooth: hci0: command tx timeout [ 129.803748][ T5243] Bluetooth: hci2: command tx timeout [ 129.805084][ T5249] Bluetooth: hci1: command tx timeout [ 129.875960][ T5249] Bluetooth: hci3: command tx timeout [ 130.099268][ T5241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.151876][ T5241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.197445][ T5241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.246135][ T5241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.338986][ T5247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.395962][ T5247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.450897][ T5247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.466845][ T5247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.643739][ T5248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.699316][ T5248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 130.743842][ T5248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 130.808390][ T5248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.957597][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.050256][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.086925][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.130677][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.231649][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.267522][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.452140][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.456338][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.494494][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.501703][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.546404][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.601851][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.700315][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.707180][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.726955][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.770122][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.773053][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.879843][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.890632][ T5247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.013844][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.027951][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.031346][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.058297][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.070798][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.226093][ T5248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.239612][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.327286][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.438567][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.516594][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.528262][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.552141][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.702302][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.710367][ T5288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.734145][ T5241] veth0_vlan: entered promiscuous mode [ 132.767270][ T5244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.774029][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.883672][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.030000][ T5241] veth1_vlan: entered promiscuous mode [ 133.107985][ T5247] veth0_vlan: entered promiscuous mode [ 133.148911][ T5248] veth0_vlan: entered promiscuous mode [ 133.195820][ T5248] veth1_vlan: entered promiscuous mode [ 133.228198][ T5247] veth1_vlan: entered promiscuous mode [ 133.313692][ T5241] veth0_macvtap: entered promiscuous mode [ 133.331613][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.360213][ T5241] veth1_macvtap: entered promiscuous mode [ 133.406251][ T5248] veth0_macvtap: entered promiscuous mode [ 133.468555][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.502799][ T5247] veth0_macvtap: entered promiscuous mode [ 133.522189][ T5248] veth1_macvtap: entered promiscuous mode [ 133.546224][ T5247] veth1_macvtap: entered promiscuous mode [ 133.576804][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.593565][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.613837][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.661677][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.702308][ T5244] veth0_vlan: entered promiscuous mode [ 133.766163][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.772821][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.801123][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.812581][ T5241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.818163][ T5241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.826935][ T5241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.845312][ T5241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.890128][ T5248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.893574][ T5248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.898687][ T5248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.909184][ T5248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.924719][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.932404][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.942628][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.968395][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.988807][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.028968][ T5244] veth1_vlan: entered promiscuous mode [ 134.076456][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.090935][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.097381][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.102315][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.109114][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.145180][ T5247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.158305][ T5247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.161692][ T5247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.165240][ T5247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.359939][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.363286][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.410041][ T5244] veth0_macvtap: entered promiscuous mode [ 134.469094][ T5244] veth1_macvtap: entered promiscuous mode [ 134.674404][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.684999][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.724792][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.728329][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.731875][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.737002][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.749811][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.758540][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.764605][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.788865][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.816283][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.816300][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.816312][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.816322][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.816332][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.844779][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.907512][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.907984][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.908040][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.908054][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.911727][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.915358][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.931186][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.931217][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.085089][ T724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.100876][ T724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.345767][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.352023][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.370773][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.375377][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.481350][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.507883][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.428734][ T5314] Bluetooth: MGMT ver 1.23 [ 136.447955][ T5312] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 136.500147][ T5319] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.175673][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.307573][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.359515][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.427849][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.583528][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.918593][ T5347] block nbd0: Device being setup by another task [ 138.060950][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.088030][ T5350] block nbd0: shutting down sockets [ 138.127805][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.387319][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.534297][ T5243] Bluetooth: hci0: command 0x0401 tx timeout [ 138.552993][ T5249] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 138.712143][ T5369] mkiss: ax0: crc mode is auto. [ 139.320279][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.323854][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.389875][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.423724][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.506721][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.567625][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.639634][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 139.717315][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.723163][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.735329][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.774355][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.776258][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 139.791082][ T9] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 139.794735][ T9] usb 7-1: Product: syz [ 139.809257][ T9] usb 7-1: Manufacturer: syz [ 139.811565][ T9] usb 7-1: SerialNumber: syz [ 139.839487][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.913932][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input5 [ 140.024195][ T5393] block nbd3: Device being setup by another task [ 140.063484][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.160219][ T5397] block nbd3: shutting down sockets [ 140.279853][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.359645][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.459900][ T5233] usb 7-1: USB disconnect, device number 2 [ 140.487547][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.675532][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.758708][ T5233] appletouch 7-1:1.0: input: appletouch disconnected [ 140.811419][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.859444][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.106327][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.323227][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.482211][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.582310][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.711449][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.815763][ T5249] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 141.819015][ T5249] Bluetooth: hci0: command 0x0401 tx timeout [ 142.161391][ T5438] block nbd1: Device being setup by another task [ 142.249185][ T5442] block nbd1: shutting down sockets [ 142.422027][ T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 142.678596][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 142.687358][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 142.838384][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.844119][ T5454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 142.848169][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.941935][ T41] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.960371][ T41] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 142.967007][ T41] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 142.973337][ T41] usb 7-1: Product: syz [ 142.985619][ T41] usb 7-1: Manufacturer: syz [ 143.034610][ T41] usb 7-1: SerialNumber: syz [ 143.140385][ T41] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input6 [ 143.628774][ T5285] usb 7-1: USB disconnect, device number 3 [ 143.807080][ T5285] appletouch 7-1:1.0: input: appletouch disconnected [ 144.358032][ T67] Bluetooth: hci0: command 0x0401 tx timeout [ 144.392887][ T5243] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 145.021084][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 145.059461][ T5285] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.267646][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 145.271812][ T5493] openvswitch: netlink: Port -2 exceeds max allowable 65535 [ 145.343158][ T5285] usb 5-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 145.347274][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.359379][ T5285] usb 5-1: Product: syz [ 145.363459][ T5285] usb 5-1: Manufacturer: syz [ 145.365248][ T5285] usb 5-1: SerialNumber: syz [ 145.386300][ T5285] usb 5-1: config 0 descriptor?? [ 145.670357][ T5285] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 145.752782][ T5285] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 145.771541][ T5285] dib0700: firmware download failed at 7 with -22 [ 146.591384][ C2] vkms_vblank_simulate: vblank timer overrun [ 146.889012][ T5520] block nbd3: Device being setup by another task [ 146.946995][ C2] vkms_vblank_simulate: vblank timer overrun [ 147.003930][ T5522] block nbd3: shutting down sockets [ 147.014228][ C2] vkms_vblank_simulate: vblank timer overrun [ 147.119433][ C2] vkms_vblank_simulate: vblank timer overrun [ 147.215420][ C2] vkms_vblank_simulate: vblank timer overrun [ 147.502414][ T5243] Bluetooth: hci2: command 0x0406 tx timeout [ 147.759669][ T42] usb 5-1: USB disconnect, device number 2 [ 147.776473][ C2] vkms_vblank_simulate: vblank timer overrun [ 148.656895][ C2] vkms_vblank_simulate: vblank timer overrun [ 148.777372][ T5287] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.843392][ C2] vkms_vblank_simulate: vblank timer overrun [ 149.008698][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 149.026400][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.044309][ T5287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.050959][ T5287] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.084946][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 149.123705][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 149.134707][ T5287] usb 5-1: Product: syz [ 149.137041][ T5287] usb 5-1: Manufacturer: syz [ 149.139110][ T5287] usb 5-1: SerialNumber: syz [ 149.185400][ T5287] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input7 [ 149.223735][ T5555] block nbd2: Device being setup by another task [ 149.339781][ T5555] block nbd2: shutting down sockets [ 149.383857][ C2] vkms_vblank_simulate: vblank timer overrun [ 149.490364][ C2] vkms_vblank_simulate: vblank timer overrun [ 149.583423][ C2] vkms_vblank_simulate: vblank timer overrun [ 149.617204][ C2] vkms_vblank_simulate: vblank timer overrun [ 149.718177][ T36] usb 5-1: USB disconnect, device number 3 [ 149.820541][ T829] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 149.825417][ T36] appletouch 5-1:1.0: input: appletouch disconnected [ 149.923210][ T5564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.88'. [ 149.950083][ T5564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 150.013470][ T829] usb 8-1: Using ep0 maxpacket: 16 [ 150.042785][ T829] usb 8-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 150.049641][ T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.056394][ T829] usb 8-1: Product: syz [ 150.069789][ T829] usb 8-1: Manufacturer: syz [ 150.080756][ T829] usb 8-1: SerialNumber: syz [ 150.100239][ T829] usb 8-1: config 0 descriptor?? [ 150.195634][ T5243] Bluetooth: hci0: command 0x0401 tx timeout [ 150.440492][ T829] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 150.466426][ T829] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 150.471620][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.494880][ C2] vkms_vblank_simulate: vblank timer overrun [ 150.510859][ T829] dib0700: firmware download failed at 7 with -22 [ 150.549652][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.623344][ C2] vkms_vblank_simulate: vblank timer overrun [ 151.025877][ C2] vkms_vblank_simulate: vblank timer overrun [ 151.389947][ C2] vkms_vblank_simulate: vblank timer overrun [ 151.632271][ C2] vkms_vblank_simulate: vblank timer overrun [ 151.675349][ C2] vkms_vblank_simulate: vblank timer overrun [ 151.855423][ T5589] block nbd2: Device being setup by another task [ 151.959684][ T5589] block nbd2: shutting down sockets [ 152.179050][ T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.227661][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.393726][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'. [ 152.424455][ T5596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 152.459331][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.477102][ T36] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.509630][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.523485][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.532269][ T36] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.532314][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.534325][ T36] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.534350][ T36] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.534366][ T36] usb 6-1: Product: syz [ 152.534378][ T36] usb 6-1: Manufacturer: syz [ 152.548415][ T36] cdc_wdm 6-1:1.0: skipping garbage [ 152.570582][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.643415][ T36] cdc_wdm 6-1:1.0: skipping garbage [ 152.658606][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.668766][ T36] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 152.695355][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.727493][ C2] vkms_vblank_simulate: vblank timer overrun [ 152.731087][ T9] usb 8-1: USB disconnect, device number 2 [ 152.749630][ T36] cdc_wdm 6-1:1.0: Unknown control protocol [ 152.890044][ T40] audit: type=1326 audit(1721644537.539:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.1.97" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe8579 code=0x0 [ 152.923647][ T5604] ======================================================= [ 152.923647][ T5604] WARNING: The mand mount option has been deprecated and [ 152.923647][ T5604] and is ignored by this kernel. Remove the mand [ 152.923647][ T5604] option from the mount to silence this warning. [ 152.923647][ T5604] ======================================================= [ 153.285688][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 153.551137][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 153.584151][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.589193][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.598198][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.743754][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 153.759193][ T9] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 153.780779][ T9] usb 8-1: Product: syz [ 153.788935][ T9] usb 8-1: Manufacturer: syz [ 153.814557][ T9] usb 8-1: SerialNumber: syz [ 153.854856][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input8 [ 154.204000][ C2] vkms_vblank_simulate: vblank timer overrun [ 154.409424][ T5623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'. [ 154.419377][ T5623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 154.471010][ T36] usb 8-1: USB disconnect, device number 3 [ 154.495345][ C2] vkms_vblank_simulate: vblank timer overrun [ 154.556251][ C2] vkms_vblank_simulate: vblank timer overrun [ 154.770670][ T36] appletouch 8-1:1.0: input: appletouch disconnected [ 154.994048][ T42] usb 6-1: USB disconnect, device number 2 [ 155.004814][ C2] vkms_vblank_simulate: vblank timer overrun [ 155.238536][ C2] vkms_vblank_simulate: vblank timer overrun [ 155.253687][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 155.537737][ C2] vkms_vblank_simulate: vblank timer overrun [ 156.211322][ C2] vkms_vblank_simulate: vblank timer overrun [ 156.439355][ C2] vkms_vblank_simulate: vblank timer overrun [ 156.442649][ T5656] [U]  [ 156.476531][ T36] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 156.527307][ C2] vkms_vblank_simulate: vblank timer overrun [ 156.696593][ C2] vkms_vblank_simulate: vblank timer overrun [ 156.723602][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 156.740319][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 156.753857][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.771055][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.805535][ T36] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.832706][ T36] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 156.850960][ T36] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 156.911132][ T36] usb 8-1: Product: syz [ 156.913791][ T36] usb 8-1: Manufacturer: syz [ 156.916747][ T36] usb 8-1: SerialNumber: syz [ 156.928385][ T36] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input9 [ 157.443046][ T5670] warning: `syz.1.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.855686][ T5285] usb 8-1: USB disconnect, device number 4 [ 157.898265][ T5681] [U]  [ 158.073082][ T5285] appletouch 8-1:1.0: input: appletouch disconnected [ 158.957637][ T5703] [U]  [ 158.969844][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 159.171302][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.319367][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.578620][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.868636][ T828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.895923][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.948524][ T5724] [U]  [ 160.096874][ T5728] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.105950][ T828] usb 6-1: Using ep0 maxpacket: 32 [ 160.131033][ T828] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.151889][ T828] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.168761][ T828] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.203075][ T5727] bridge0: port 3(batadv0) entered blocking state [ 160.212704][ T828] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 160.224039][ T5727] bridge0: port 3(batadv0) entered disabled state [ 160.237267][ T828] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 160.248182][ T5727] batadv0: entered allmulticast mode [ 160.249846][ T5727] batadv0: entered promiscuous mode [ 160.250922][ T5727] bridge0: port 3(batadv0) entered blocking state [ 160.251053][ T5727] bridge0: port 3(batadv0) entered forwarding state [ 160.252554][ T5728] batadv_slave_1: entered promiscuous mode [ 160.268635][ T828] usb 6-1: Product: syz [ 160.303070][ T828] usb 6-1: Manufacturer: syz [ 160.306540][ T828] usb 6-1: SerialNumber: syz [ 160.316484][ T828] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input10 [ 160.339302][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.454881][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.487227][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.490614][ T5725] batadv_slave_1: left promiscuous mode [ 160.623573][ T724] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.628283][ T724] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 160.638442][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.792565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.804299][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.082881][ T828] usb 6-1: USB disconnect, device number 3 [ 161.102476][ T828] appletouch 6-1:1.0: input: appletouch disconnected [ 161.208524][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.287306][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.370506][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.443256][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.503632][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.538311][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.908138][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 162.008202][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.243212][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.628135][ C2] vkms_vblank_simulate: vblank timer overrun [ 162.634227][ T5766] bridge0: port 3(batadv0) entered blocking state [ 162.656427][ T5766] bridge0: port 3(batadv0) entered disabled state [ 162.659409][ T5766] batadv0: entered allmulticast mode [ 162.663367][ T5766] batadv0: entered promiscuous mode [ 162.674274][ T5766] bridge0: port 3(batadv0) entered blocking state [ 162.677496][ T5766] bridge0: port 3(batadv0) entered forwarding state [ 162.792719][ T5770] batadv_slave_1: entered promiscuous mode [ 162.894141][ T5765] batadv_slave_1: left promiscuous mode [ 163.031322][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.035293][ T3569] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 163.041117][ T3569] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 163.315687][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.347188][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.527883][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.555283][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.641291][ C2] vkms_vblank_simulate: vblank timer overrun [ 163.771492][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 163.792796][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.802969][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.808494][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.968600][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.981410][ T31] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.987117][ T31] usb 5-1: Product: syz [ 163.991488][ T31] usb 5-1: Manufacturer: syz [ 164.018244][ T31] usb 5-1: SerialNumber: syz [ 164.050609][ T31] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input11 [ 164.079932][ T5795] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 164.124942][ T5795] netlink: 'syz.1.177': attribute type 21 has an invalid length. [ 164.696617][ T5803] bridge0: port 3(batadv0) entered blocking state [ 164.704929][ T5803] bridge0: port 3(batadv0) entered disabled state [ 164.728153][ T5803] batadv0: entered allmulticast mode [ 164.732417][ T5803] batadv0: entered promiscuous mode [ 164.739077][ T5803] bridge0: port 3(batadv0) entered blocking state [ 164.746582][ T5803] bridge0: port 3(batadv0) entered forwarding state [ 164.758234][ T41] usb 5-1: USB disconnect, device number 4 [ 164.810732][ T59] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 164.814687][ T59] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 164.858124][ T41] appletouch 5-1:1.0: input: appletouch disconnected [ 164.918149][ T5803] batadv_slave_1: entered promiscuous mode [ 164.937169][ T5801] batadv_slave_1: left promiscuous mode [ 165.715294][ T5825] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 165.749353][ T5825] netlink: 'syz.1.189': attribute type 21 has an invalid length. [ 166.172746][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 167.179181][ T5843] batadv_slave_1: entered promiscuous mode [ 167.252504][ T5842] batadv_slave_1: left promiscuous mode [ 167.496590][ T5851] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 167.582998][ T5851] netlink: 'syz.0.200': attribute type 21 has an invalid length. [ 168.341582][ T5249] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 168.407398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 169.048535][ T5882] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 169.186726][ T5884] Zero length message leads to an empty skb [ 169.533928][ T5882] netlink: 'syz.2.211': attribute type 21 has an invalid length. [ 169.571396][ T5891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.684205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 169.769437][ T5884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.848643][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.894475][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.309758][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 170.831763][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.199843][ T5915] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 171.281273][ T5915] netlink: 'syz.2.224': attribute type 21 has an invalid length. [ 171.433514][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.649789][ T5249] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 171.760289][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.799184][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.939141][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.347138][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.531124][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.573971][ T5934] raw_sendmsg: syz.3.231 forgot to set AF_INET. Fix it! [ 173.427153][ T5249] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 173.784472][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.915109][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.071123][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.078058][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 174.135106][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.263290][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.687106][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.973126][ T5981] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 175.083070][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.287111][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.285663][ T5287] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 176.395958][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 176.515227][ T5287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.520637][ T5287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.529778][ T5287] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.534778][ T5287] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.615257][ T5287] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.635407][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 176.662100][ T5287] usb 7-1: config 0 descriptor?? [ 176.696364][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.702606][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.728627][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 176.733957][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 176.739296][ T31] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 176.795270][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.839096][ T31] hub 6-1:1.0: bad descriptor, ignoring hub [ 176.875428][ C1] hrtimer: interrupt took 1155656 ns [ 176.893268][ T31] hub 6-1:1.0: probe with driver hub failed with error -5 [ 176.913202][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 176.916485][ T31] cdc_wdm 6-1:1.0: skipping garbage [ 176.937719][ T31] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 176.941581][ T31] cdc_wdm 6-1:1.0: Unknown control protocol [ 177.246391][ T5287] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 177.273733][ T5287] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 177.757303][ T5285] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 177.977527][ T5285] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.978230][ T5995] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 178.117788][ T5285] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 178.173924][ T5285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.195519][ T5285] usb 8-1: Product: syz [ 178.230093][ T5285] usb 8-1: Manufacturer: syz [ 178.232397][ T5285] usb 8-1: SerialNumber: syz [ 178.254801][ T5287] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 178.350340][ T5287] usb 7-1: USB disconnect, device number 4 [ 179.367626][ T5286] usb 6-1: USB disconnect, device number 4 [ 179.391182][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.419038][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.455453][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.802665][ T5249] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 179.869215][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.021970][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.109507][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.179040][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.241275][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.289461][ T6034] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 180.452307][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.484065][ T5226] usb 8-1: USB disconnect, device number 5 [ 180.523007][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.555031][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.772889][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.360221][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.386115][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.479796][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 181.496389][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.623028][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.631637][ T6048] team0: Port device bridge1 added [ 181.675044][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.724762][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 181.743890][ T6048] mmap: syz.2.279 (6048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.804883][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.846075][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.135089][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.655011][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.771019][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.974972][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.188090][ T5286] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.262962][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.439112][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 183.453220][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.467300][ T5286] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.471546][ T5286] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.518989][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.531016][ T5286] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 183.550591][ T5286] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 183.552890][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.588005][ T5286] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 183.588500][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.621004][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.634587][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.706438][ T5286] hub 5-1:1.0: bad descriptor, ignoring hub [ 183.713493][ T5286] hub 5-1:1.0: probe with driver hub failed with error -5 [ 183.716865][ T5286] cdc_wdm 5-1:1.0: skipping garbage [ 183.731462][ T5286] cdc_wdm 5-1:1.0: skipping garbage [ 183.747002][ T5286] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 183.751792][ T5286] cdc_wdm 5-1:1.0: Unknown control protocol [ 183.777380][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.869057][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.906935][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.991001][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.103021][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.169914][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.204899][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.271026][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.509485][ T6082] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 184.864291][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 185.008504][ T6087] team0: Port device bridge2 added [ 185.043198][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 185.115686][ T42] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 185.371347][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.392601][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.411209][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.416888][ T42] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.453230][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.491704][ T42] usb 8-1: config 0 descriptor?? [ 185.838163][ T9] usb 5-1: USB disconnect, device number 5 [ 186.035179][ T42] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 186.047775][ T42] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 186.135569][ T42] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 186.485828][ T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.544142][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 186.713155][ T41] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 186.733673][ T41] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.738190][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.743590][ T41] usb 6-1: Product: syz [ 186.749852][ T41] usb 6-1: Manufacturer: syz [ 186.752166][ T6111] team0: Port device bridge3 added [ 186.755158][ T41] usb 6-1: SerialNumber: syz [ 186.832471][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 187.173012][ T40] audit: type=1326 audit(1721644571.809:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.305" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf745e579 code=0x0 [ 188.228747][ T829] usb 8-1: USB disconnect, device number 6 [ 189.233153][ T41] usb 6-1: USB disconnect, device number 5 [ 189.511877][ T40] audit: type=1326 audit(1721644574.149:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.3.320" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65579 code=0x0 [ 189.811358][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.080547][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.092721][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.099921][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.168834][ T41] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.174001][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.189029][ T41] usb 6-1: config 0 descriptor?? [ 190.745855][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 190.757150][ T41] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 190.785031][ T41] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 192.135405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.915410][ T5226] usb 6-1: USB disconnect, device number 6 [ 193.048811][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 193.382754][ T6194] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 194.853799][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 194.967333][ T42] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 195.084031][ T6230] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 195.211295][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.223278][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.230996][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.239527][ T42] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.262017][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.268204][ T42] usb 7-1: config 0 descriptor?? [ 195.467988][ T6236] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 195.471304][ T6236] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.347'. [ 195.797160][ T42] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 195.801964][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 195.827858][ T42] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 195.923032][ T42] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 197.981880][ T41] usb 7-1: USB disconnect, device number 5 [ 198.338037][ T6296] xt_hashlimit: invalid interval [ 199.456402][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.373'. [ 199.884661][ T6325] usb usb8: usbfs: process 6325 (syz.0.375) did not claim interface 0 before use [ 201.347163][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 201.597583][ T6353] netlink: 'syz.3.382': attribute type 4 has an invalid length. [ 201.614737][ T6353] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.382'. [ 202.138715][ T6366] xt_hashlimit: invalid interval [ 202.664341][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 203.260412][ T6387] netlink: 'syz.1.398': attribute type 21 has an invalid length. [ 203.272612][ T6387] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 203.283207][ T6387] netlink: 100 bytes leftover after parsing attributes in process `syz.1.398'. [ 203.341966][ T6391] netlink: 80 bytes leftover after parsing attributes in process `syz.1.401'. [ 203.486073][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 203.975080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 204.199104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 204.214111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 204.912073][ T6427] netlink: 80 bytes leftover after parsing attributes in process `syz.0.411'. [ 205.153148][ T6436] usb usb8: usbfs: process 6436 (syz.2.412) did not claim interface 0 before use [ 205.190300][ T6438] netlink: 'syz.0.413': attribute type 21 has an invalid length. [ 205.216133][ T6438] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 205.220508][ T6438] netlink: 100 bytes leftover after parsing attributes in process `syz.0.413'. [ 205.387190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 205.390785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 205.404806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 206.087295][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 207.412270][ T6498] usb usb8: usbfs: process 6498 (syz.0.431) did not claim interface 0 before use [ 208.598595][ T6516] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 208.598595][ T6516] ÄUúeâ[¦ÓÎ%#s' [ 209.604690][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 209.842953][ T6532] Process accounting resumed [ 209.918192][ T6546] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 209.918192][ T6546] ÄUúeâ[¦ÓÎ%#s' [ 210.268069][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 210.365039][ T6559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.455'. [ 210.431627][ T6559] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 210.449518][ T6559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.486910][ T6559] vhci_hcd vhci_hcd.0: Device attached [ 210.703742][ T6561] vhci_hcd: connection closed [ 210.725898][ T59] vhci_hcd: stop threads [ 210.731109][ T59] vhci_hcd: release socket [ 210.753328][ T59] vhci_hcd: disconnect device [ 210.832598][ T5289] usb 19-1: new high-speed USB device number 2 using vhci_hcd [ 210.849783][ T5289] usb 19-1: enqueue for inactive port 0 [ 211.008594][ T5289] vhci_hcd: vhci_device speed not set [ 211.648438][ T5249] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 211.881152][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.903110][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.159092][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 212.206709][ T5626] IPVS: starting estimator thread 0... [ 212.249086][ T6594] 9pnet_fd: Insufficient options for proto=fd [ 212.345722][ T6596] IPVS: using max 21 ests per chain, 50400 per kthread [ 212.835545][ T6607] netlink: 104 bytes leftover after parsing attributes in process `syz.0.471'. [ 212.901494][ T6607] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 212.905247][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.917585][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 213.205653][ T5286] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 213.226089][ T6608] vhci_hcd: connection closed [ 213.259229][ T11] vhci_hcd: stop threads [ 213.282465][ T11] vhci_hcd: release socket [ 213.305893][ T11] vhci_hcd: disconnect device [ 213.658980][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.478'. [ 214.064664][ T6631] vxcan1: tx address claim with dlc 1 [ 214.349399][ T6638] xt_nat: multiple ranges no longer supported [ 214.492791][ T829] IPVS: starting estimator thread 0... [ 214.522788][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 214.699601][ T6641] IPVS: using max 22 ests per chain, 52800 per kthread [ 215.738888][ T5249] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 215.803188][ T5249] Bluetooth: hci3: Injecting HCI hardware error event [ 215.807090][ T5249] Bluetooth: hci3: hardware error 0x00 [ 217.102579][ T6668] netlink: 104 bytes leftover after parsing attributes in process `syz.3.489'. [ 217.118672][ T6668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 217.126947][ T6668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.171554][ T6668] vhci_hcd vhci_hcd.0: Device attached [ 217.355986][ T6669] vhci_hcd: connection closed [ 217.356232][ T724] vhci_hcd: stop threads [ 217.359881][ T724] vhci_hcd: release socket [ 217.361832][ T724] vhci_hcd: disconnect device [ 217.383485][ T5285] vhci_hcd: vhci_device speed not set [ 218.129093][ T5249] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 218.385270][ T5286] vhci_hcd: vhci_device speed not set [ 218.905051][ T6712] 9pnet_fd: Insufficient options for proto=fd [ 218.933793][ T6713] netlink: 'syz.1.494': attribute type 4 has an invalid length. [ 220.392599][ T6735] ipt_rpfilter: unknown options [ 221.448950][ T6747] xt_nat: multiple ranges no longer supported [ 221.873806][ T6754] netlink: 156 bytes leftover after parsing attributes in process `syz.0.509'. [ 222.142655][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.367805][ T41] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.377299][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 222.395198][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.430642][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.436128][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.483928][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.502437][ T41] usb 5-1: config 0 descriptor?? [ 222.551436][ T6754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.065883][ T6764] ipt_rpfilter: unknown options [ 223.078425][ T41] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 223.096910][ T41] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 223.126382][ T41] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 223.413352][ T41] usb 5-1: USB disconnect, device number 6 [ 224.967921][ T6783] netlink: 'syz.2.521': attribute type 4 has an invalid length. [ 224.972834][ T6783] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.521'. [ 228.042221][ T6814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.536'. [ 228.059661][ T6812] netlink: 104 bytes leftover after parsing attributes in process `syz.0.535'. [ 228.145088][ T6815] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 228.179087][ T6815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.228438][ T6815] vhci_hcd vhci_hcd.0: Device attached [ 228.300448][ T6816] vhci_hcd: cannot find the pending unlink 5 [ 228.517683][ T41] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 228.673406][ T6816] vhci_hcd: connection reset by peer [ 228.695353][ T104] vhci_hcd: stop threads [ 228.723878][ T104] vhci_hcd: release socket [ 228.747338][ T104] vhci_hcd: disconnect device [ 229.734372][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.863341][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.903543][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.944654][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.968195][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.051138][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.160134][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.164588][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.176056][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.179411][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.259144][ T67] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.260752][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.078453][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.547'. [ 231.252853][ T6857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.548'. [ 231.305282][ T6857] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 231.354525][ T6857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.361621][ T6857] vhci_hcd vhci_hcd.0: Device attached [ 231.365831][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 231.384812][ T6859] vhci_hcd: cannot find the pending unlink 5 [ 231.676000][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 231.762030][ T6859] vhci_hcd: connection closed [ 231.834962][ T104] vhci_hcd: stop threads [ 231.839000][ T104] vhci_hcd: release socket [ 231.855836][ T104] vhci_hcd: disconnect device [ 232.390572][ T5246] Bluetooth: hci4: command tx timeout [ 232.450047][ T5246] Bluetooth: hci1: command tx timeout [ 232.519014][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.550905][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.568012][ T6829] bridge_slave_0: entered allmulticast mode [ 232.572045][ T6829] bridge_slave_0: entered promiscuous mode [ 232.777384][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.784212][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.787432][ T6829] bridge_slave_1: entered allmulticast mode [ 232.807278][ T6829] bridge_slave_1: entered promiscuous mode [ 233.523968][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.527002][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.529865][ T6832] bridge_slave_0: entered allmulticast mode [ 233.533735][ T6832] bridge_slave_0: entered promiscuous mode [ 233.593534][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.662057][ T41] vhci_hcd: vhci_device speed not set [ 233.696168][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.701955][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.710466][ T6832] bridge_slave_1: entered allmulticast mode [ 233.740104][ T6832] bridge_slave_1: entered promiscuous mode [ 233.787107][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.017059][ T6889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.558'. [ 234.045761][ T6889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 234.049879][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.100964][ T9] libceph: connect (1)[c::]:6789 error -101 [ 234.105250][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 234.114655][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 234.198889][ T6890] ceph: No mds server is up or the cluster is laggy [ 234.281954][ T6829] team0: Port device team_slave_0 added [ 234.290680][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.301021][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.319395][ T6892] vhci_hcd: connection closed [ 234.339184][ T1092] vhci_hcd: stop threads [ 234.344234][ T1092] vhci_hcd: release socket [ 234.346679][ T1092] vhci_hcd: disconnect device [ 234.386631][ T6829] team0: Port device team_slave_1 added [ 234.432425][ T41] vhci_hcd: vhci_device speed not set [ 234.464610][ T5246] Bluetooth: hci4: command tx timeout [ 234.522826][ T5246] Bluetooth: hci1: command tx timeout [ 235.176435][ T6832] team0: Port device team_slave_0 added [ 235.199395][ T6832] team0: Port device team_slave_1 added [ 235.529067][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.532294][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.600123][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.905621][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.908768][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.975385][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.050805][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.068659][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.110000][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.298130][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.301525][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.315344][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.533459][ T5246] Bluetooth: hci4: command tx timeout [ 236.579914][ T6829] hsr_slave_0: entered promiscuous mode [ 236.615695][ T5246] Bluetooth: hci1: command tx timeout [ 236.651742][ T6829] hsr_slave_1: entered promiscuous mode [ 236.688138][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.691164][ T6829] Cannot create hsr debugfs directory [ 237.099869][ T6832] hsr_slave_0: entered promiscuous mode [ 237.161456][ T6832] hsr_slave_1: entered promiscuous mode [ 237.235916][ T6832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.240112][ T6832] Cannot create hsr debugfs directory [ 238.318660][ T5246] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 238.642538][ T5246] Bluetooth: hci4: command tx timeout [ 238.680165][ T5246] Bluetooth: hci1: command tx timeout [ 239.094048][ T6829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.765993][ T6829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.336507][ T6829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.818749][ T6829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.959220][ T6968] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.581'. [ 241.939770][ T6829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.013814][ T6977] 9pnet_fd: Insufficient options for proto=fd [ 242.264333][ T6832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.306669][ T6829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.571248][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.608967][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.638638][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.647166][ T6829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.756551][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.766202][ T6832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.803604][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 242.842095][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.845597][ T6829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.128103][ T6832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.598980][ T6832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.925118][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.201821][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.333385][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.336267][ T829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.343261][ T829] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.370738][ T829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.468512][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 244.573784][ T6832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.673671][ T6832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.729203][ T6832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.954257][ T6832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.019678][ T5246] Bluetooth: hci2: command tx timeout [ 245.551704][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.573114][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.582178][ T6978] bridge_slave_0: entered allmulticast mode [ 245.603809][ T6978] bridge_slave_0: entered promiscuous mode [ 245.617396][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.675999][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.679879][ T6978] bridge_slave_1: entered allmulticast mode [ 245.684076][ T6978] bridge_slave_1: entered promiscuous mode [ 246.229388][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.366721][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.741067][ T6978] team0: Port device team_slave_0 added [ 246.758625][ T6978] team0: Port device team_slave_1 added [ 247.087314][ T5246] Bluetooth: hci2: command tx timeout [ 247.290348][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.293443][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.339806][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.396646][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.465081][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.470876][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.565528][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.777455][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.307229][ T6978] hsr_slave_0: entered promiscuous mode [ 248.358442][ T6978] hsr_slave_1: entered promiscuous mode [ 248.374414][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.378308][ T6978] Cannot create hsr debugfs directory [ 249.098786][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.166817][ T5246] Bluetooth: hci2: command tx timeout [ 249.775424][ T3569] batadv0: left allmulticast mode [ 249.778237][ T3569] batadv0: left promiscuous mode [ 249.782707][ T3569] bridge0: port 3(batadv0) entered disabled state [ 249.865634][ T3569] bridge_slave_1: left allmulticast mode [ 249.868047][ T3569] bridge_slave_1: left promiscuous mode [ 249.878907][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.947513][ T3569] bridge_slave_0: left allmulticast mode [ 249.949838][ T3569] bridge_slave_0: left promiscuous mode [ 249.952262][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.251216][ T5246] Bluetooth: hci2: command tx timeout [ 252.059168][ T3569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.294839][ T3569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.435078][ T3569] bond0 (unregistering): Released all slaves [ 252.456065][ T3569] bond1 (unregistering): Released all slaves [ 252.477731][ T3569] bond2 (unregistering): Released all slaves [ 252.537745][ T3569] bond3 (unregistering): Released all slaves [ 252.714498][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.717622][ T828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.719016][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.731592][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.813361][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.830299][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.855611][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.874586][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.312142][ T5307] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.315608][ T5307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.325426][ T6829] veth0_vlan: entered promiscuous mode [ 253.374753][ T6829] veth1_vlan: entered promiscuous mode [ 253.408322][ T6978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.982985][ T6978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.513032][ T6978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.554582][ T6829] veth0_macvtap: entered promiscuous mode [ 254.564620][ T6829] veth1_macvtap: entered promiscuous mode [ 254.703217][ T6978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.734846][ T3569] hsr_slave_0: left promiscuous mode [ 254.738648][ T3569] hsr_slave_1: left promiscuous mode [ 254.746644][ T3569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.750857][ T3569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.763731][ T3569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.770867][ T3569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.863805][ T3569] veth1_macvtap: left promiscuous mode [ 254.889235][ T3569] veth0_macvtap: left promiscuous mode [ 254.892183][ T3569] veth1_vlan: left promiscuous mode [ 254.904233][ T3569] veth0_vlan: left promiscuous mode [ 255.084897][ T5246] Bluetooth: hci0: command tx timeout [ 257.165822][ T5246] Bluetooth: hci0: command tx timeout [ 258.295698][ T3569] team0 (unregistering): Port device team_slave_1 removed [ 258.724955][ T3569] team0 (unregistering): Port device team_slave_0 removed [ 259.253938][ T5246] Bluetooth: hci0: command tx timeout [ 261.097123][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.114566][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.118865][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.138274][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.142353][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.149830][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.162094][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.325643][ T5246] Bluetooth: hci0: command tx timeout [ 261.337919][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.343629][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.353220][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.361501][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.374521][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.381847][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.400341][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.518622][ T6829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.529627][ T6829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.539152][ T6829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.543060][ T6829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.793321][ T6993] chnl_net:caif_netlink_parms(): no params data found [ 261.822040][ T6978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.848278][ T6978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.901712][ T6978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.930164][ T6978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.251941][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.415294][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.420429][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.521069][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.524076][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.530132][ T6993] bridge_slave_0: entered allmulticast mode [ 262.539102][ T6993] bridge_slave_0: entered promiscuous mode [ 262.606696][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.609650][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.618077][ T6993] bridge_slave_1: entered allmulticast mode [ 262.621773][ T6993] bridge_slave_1: entered promiscuous mode [ 262.857061][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.857646][ T3569] IPVS: stop unused estimator thread 0... [ 262.860101][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.116456][ T6993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.260809][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.322697][ T6993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.468614][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 263.522777][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.528068][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.532496][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.544570][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.558284][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.598022][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 263.602665][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.629241][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 263.634534][ T6832] veth0_vlan: entered promiscuous mode [ 263.649873][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.683084][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.695928][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.698756][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.701210][ T6993] team0: Port device team_slave_0 added [ 263.701726][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 263.701742][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.724167][ T6993] team0: Port device team_slave_1 added [ 263.727423][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727442][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727455][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727468][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727482][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727495][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727508][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727521][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.727535][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.846075][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.849305][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.858115][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.881290][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.908558][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.953903][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.972828][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 263.977347][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.001886][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.005316][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.023991][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.053303][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.072859][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.076630][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.109290][ T828] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 264.251198][ T828] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 264.344494][ T6832] veth1_vlan: entered promiscuous mode [ 264.367199][ T6993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.370186][ T6993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.406345][ T6993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.441590][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.444827][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.547219][ T6993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.550799][ T6993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.583241][ T6993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.144424][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.149062][ T5626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.220722][ T6993] hsr_slave_0: entered promiscuous mode [ 265.238837][ T6993] hsr_slave_1: entered promiscuous mode [ 265.262524][ T6993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.267839][ T6993] Cannot create hsr debugfs directory [ 265.438077][ T6832] veth0_macvtap: entered promiscuous mode [ 265.752117][ T6832] veth1_macvtap: entered promiscuous mode [ 265.982212][ T6978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.383165][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.460030][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.464047][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.504153][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.524664][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.529582][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.559183][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.589099][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.596336][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.998986][ T6993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.198973][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.202936][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.254991][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.279086][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.286276][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.304987][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.324462][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.333765][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.339740][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.528561][ T6993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.679596][ T6832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.702421][ T6832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.753339][ T6832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.762500][ T6832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.816554][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.298620][ T6993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.771691][ T6993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.033763][ T7037] 9pnet_fd: Insufficient options for proto=fd [ 269.726413][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.776124][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.786900][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.826087][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.990797][ T6978] veth0_vlan: entered promiscuous mode [ 270.364965][ T6978] veth1_vlan: entered promiscuous mode [ 270.602497][ T6993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.679764][ T6993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.769484][ T6993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.905684][ T6993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.035308][ T6978] veth0_macvtap: entered promiscuous mode [ 271.165164][ T6978] veth1_macvtap: entered promiscuous mode [ 271.215407][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.224775][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.248010][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.283680][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.314558][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.321170][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.367921][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.398360][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.405346][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.412941][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.432951][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.522841][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.534898][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.553661][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.557938][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.579608][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.585132][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.597767][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.611889][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.616843][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.644960][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.653931][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.748103][ T6978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.783169][ T6978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.790038][ T6978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.794151][ T6978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.341554][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.354099][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.445110][ T6993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.489889][ T724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.493401][ T724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.504171][ T6993] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.770420][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.774644][ T7046] input: syz0 as /devices/virtual/input/input13 [ 272.776426][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.897217][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.913393][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.350560][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.353987][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.613658][ T6993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.111973][ T6993] veth0_vlan: entered promiscuous mode [ 274.249185][ T6993] veth1_vlan: entered promiscuous mode [ 274.610565][ T6993] veth0_macvtap: entered promiscuous mode [ 274.638473][ T6993] veth1_macvtap: entered promiscuous mode [ 274.757140][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.834018][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.876355][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.880374][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.884131][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.926191][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.931327][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.945697][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.950091][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.011973][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.036172][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.045812][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.069850][ T6993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.084189][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.093130][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.105085][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.121616][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.128912][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.138604][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.144216][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.186014][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.210034][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.214558][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.234591][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.268073][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.296847][ T6993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.424117][ T6993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.447551][ T6993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.451590][ T6993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.480938][ T6993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.183016][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.213254][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.341514][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.371310][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.221006][ T7120] xt_limit: Overflow, try lower: 0/0 [ 278.889579][ T7116] input: syz0 as /devices/virtual/input/input14 [ 279.153548][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.159640][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.178920][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.184320][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.192252][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.198450][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.371505][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 281.247053][ T5249] Bluetooth: hci3: command tx timeout [ 281.929602][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.940829][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.944763][ T7130] bridge_slave_0: entered allmulticast mode [ 281.957026][ T7130] bridge_slave_0: entered promiscuous mode [ 281.975971][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.980797][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.984697][ T7130] bridge_slave_1: entered allmulticast mode [ 281.991986][ T7130] bridge_slave_1: entered promiscuous mode [ 282.433342][ T7164] xt_limit: Overflow, try lower: 0/0 [ 282.693770][ T5295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.776251][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.850128][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.885559][ T5295] usb 5-1: device descriptor read/64, error -71 [ 283.239156][ T5295] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 283.327275][ T5249] Bluetooth: hci3: command tx timeout [ 283.394658][ T7130] team0: Port device team_slave_0 added [ 283.419871][ T5295] usb 5-1: device descriptor read/64, error -71 [ 283.461673][ T7130] team0: Port device team_slave_1 added [ 283.535903][ T5295] usb usb5-port1: attempt power cycle [ 283.881027][ T7171] input: syz0 as /devices/virtual/input/input15 [ 284.015630][ T5295] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 284.058147][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.094258][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.164344][ T5295] usb 5-1: device descriptor read/8, error -71 [ 284.260527][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.301674][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.317022][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.364632][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.446191][ T5295] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 284.480164][ T5295] usb 5-1: device descriptor read/8, error -71 [ 284.626622][ T5295] usb usb5-port1: unable to enumerate USB device [ 285.402645][ T5249] Bluetooth: hci3: command tx timeout [ 285.867650][ T7130] hsr_slave_0: entered promiscuous mode [ 285.978477][ T7130] hsr_slave_1: entered promiscuous mode [ 286.052873][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.057165][ T7130] Cannot create hsr debugfs directory [ 286.321057][ T7192] xt_limit: Overflow, try lower: 0/0 [ 286.914437][ T724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.405838][ C0] ================================================================== [ 287.417434][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2de0/0x3cb0 [ 287.425541][ C0] Read of size 8 at addr ffff888028057418 by task kworker/u32:0/11 [ 287.442846][ C0] [ 287.444305][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 287.459614][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.473619][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.477944][ C0] Call Trace: [ 287.480414][ C0] [ 287.487643][ C0] dump_stack_lvl+0x116/0x1f0 [ 287.490897][ C0] print_report+0xc3/0x620 [ 287.500048][ C0] ? __virt_addr_valid+0x5e/0x590 [ 287.502443][ C0] ? __phys_addr+0xc6/0x150 [ 287.504616][ C0] kasan_report+0xd9/0x110 [ 287.506543][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 287.508758][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 287.531492][ C0] __lock_acquire+0x2de0/0x3cb0 [ 287.534029][ C0] ? try_to_wake_up+0x5d7/0x13e0 [ 287.536409][ C0] ? __pfx_lock_release+0x10/0x10 [ 287.548957][ C0] ? rcu_is_watching+0x12/0xc0 [ 287.552170][ C0] ? __smp_call_single_queue+0x174/0x1e0 [ 287.556231][ C0] ? __pfx___lock_acquire+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 287.569576][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 287.575974][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 287.583956][ C0] lock_acquire+0x1b1/0x560 [ 287.601893][ C0] ? p9_req_put+0xca/0x250 [ 287.604374][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.615436][ C0] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 287.619710][ C0] ? select_task_rq_fair+0x360/0x44b0 [ 287.623046][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 287.633038][ C0] ? .slowpath+0x9/0x18 [ 287.635712][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 287.641806][ C0] ? p9_req_put+0xca/0x250 [ 287.659249][ C0] p9_req_put+0xca/0x250 [ 287.662188][ C0] req_done+0x1e7/0x2f0 [ 287.665069][ C0] ? __pfx_req_done+0x10/0x10 [ 287.668267][ C0] ? __pfx_req_done+0x10/0x10 [ 287.671563][ C0] vring_interrupt+0x31b/0x400 [ 287.683497][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 287.687057][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 287.690922][ C0] handle_irq_event+0xab/0x1e0 [ 287.694431][ C0] handle_edge_irq+0x263/0xd10 [ 287.697754][ C0] __common_interrupt+0xdf/0x250 [ 287.710004][ C0] common_interrupt+0x52/0xd0 [ 287.712302][ C0] asm_common_interrupt+0x26/0x40 [ 287.714701][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 287.718365][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 55 82 f6 48 89 df e8 1e d2 82 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 4f 74 f6 65 8b 05 16 06 1d 75 85 c0 74 16 5b [ 287.727512][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000246 [ 287.730482][ C0] RAX: 0000000000000002 RBX: ffff88802c02a880 RCX: 1ffffffff28578ac [ 287.750603][ C0] RDX: 0000000000000000 RSI: ffffffff8b2cd060 RDI: ffffffff8b9084e0 [ 287.763743][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff284b2f7 [ 287.781937][ C0] R10: ffffffff942597bf R11: ffffffff8b2f4a00 R12: 00000000fffff980 [ 287.810230][ C0] R13: 0000000000000000 R14: ffff88802c02a880 R15: 00000000ffffffff [ 287.813726][ C0] __mod_timer+0x8f6/0xdc0 [ 287.815585][ C0] ? __pfx___mod_timer+0x10/0x10 [ 287.821903][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 287.824272][ C0] ? __get_random_u32_below+0x4e/0xa0 [ 287.826424][ C0] call_timer_fn+0x1a0/0x610 [ 287.828330][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 287.854277][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 287.856344][ C0] ? __pfx_lock_release+0x10/0x10 [ 287.860044][ C0] ? mark_held_locks+0x9f/0xe0 [ 287.862782][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 287.865096][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 287.867292][ C0] __run_timers+0x74b/0xaf0 [ 287.869215][ C0] ? __pfx___run_timers+0x10/0x10 [ 287.871414][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.873579][ C0] run_timer_base+0x111/0x190 [ 287.903276][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 287.905339][ C0] run_timer_softirq+0x1a/0x40 [ 287.907209][ C0] handle_softirqs+0x216/0x8f0 [ 287.909097][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.918171][ C0] irq_exit_rcu+0xbb/0x120 [ 287.920228][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 287.922772][ C0] [ 287.924101][ C0] [ 287.925399][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.966311][ C0] RIP: 0010:smp_call_function_many_cond+0x4ec/0x1420 [ 287.969814][ C0] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 9b 2c 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 287.977693][ C0] RSP: 0018:ffffc900003d7910 EFLAGS: 00000293 [ 287.980047][ C0] RAX: 0000000000000000 RBX: ffff88802c244bc0 RCX: ffffffff817eef4b [ 287.991224][ C0] RDX: ffff888015f2a440 RSI: ffffffff817eef25 RDI: 0000000000000005 [ 287.994334][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 288.016768][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1005848979 [ 288.020289][ C0] R13: 0000000000000001 R14: ffff88802c244bc8 R15: ffff88802c040000 [ 288.047851][ C0] ? smp_call_function_many_cond+0x50b/0x1420 [ 288.062764][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 288.065107][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 288.078508][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 288.081102][ C0] ? __pfx___text_poke+0x10/0x10 [ 288.083883][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 288.087552][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 288.090556][ C0] text_poke_bp_batch+0x561/0x760 [ 288.095506][ C0] ? __kmalloc_node_track_caller_noprof+0xe5/0x440 [ 288.100908][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 288.121904][ C0] ? __jump_label_patch+0x1db/0x400 [ 288.124094][ C0] ? text_poke_queue+0xef/0x180 [ 288.147746][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 288.151287][ C0] text_poke_finish+0x30/0x40 [ 288.153563][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 288.156659][ C0] jump_label_update+0x1d7/0x400 [ 288.176699][ C0] static_key_disable_cpuslocked+0x154/0x1c0 [ 288.184972][ C0] static_key_disable+0x1a/0x20 [ 288.199913][ C0] toggle_allocation_gate+0x143/0x250 [ 288.202002][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 288.204284][ C0] process_one_work+0x958/0x1ad0 [ 288.206528][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 288.209823][ C0] ? __pfx_process_one_work+0x10/0x10 [ 288.219902][ C0] ? assign_work+0x1a0/0x250 [ 288.222967][ C0] worker_thread+0x6c8/0xf20 [ 288.225584][ C0] ? __pfx_worker_thread+0x10/0x10 [ 288.239736][ C0] kthread+0x2c1/0x3a0 [ 288.242048][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.245007][ C0] ? __pfx_kthread+0x10/0x10 [ 288.247648][ C0] ret_from_fork+0x45/0x80 [ 288.250279][ C0] ? __pfx_kthread+0x10/0x10 [ 288.260047][ C0] ret_from_fork_asm+0x1a/0x30 [ 288.263208][ C0] [ 288.265193][ C0] [ 288.266738][ C0] Allocated by task 7214: [ 288.282749][ C0] kasan_save_stack+0x33/0x60 [ 288.285759][ C0] kasan_save_track+0x14/0x30 [ 288.288238][ C0] __kasan_kmalloc+0xaa/0xb0 [ 288.290643][ C0] p9_client_create+0xcf/0x11b0 [ 288.294490][ C0] v9fs_session_init+0x1f8/0x1a80 [ 288.297072][ C0] v9fs_mount+0xc6/0xaa0 [ 288.299517][ C0] legacy_get_tree+0x109/0x220 [ 288.304987][ C0] vfs_get_tree+0x8f/0x380 [ 288.312143][ C0] path_mount+0x6e1/0x1f10 [ 288.314736][ C0] __ia32_sys_mount+0x292/0x310 [ 288.323278][ C0] __do_fast_syscall_32+0x73/0x120 [ 288.341511][ C0] do_fast_syscall_32+0x32/0x80 [ 288.343542][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.346388][ C0] [ 288.347486][ C0] Freed by task 7214: [ 288.349425][ C0] kasan_save_stack+0x33/0x60 [ 288.351460][ C0] kasan_save_track+0x14/0x30 [ 288.353568][ C0] kasan_save_free_info+0x3b/0x60 [ 288.376710][ C0] poison_slab_object+0xf7/0x160 [ 288.379344][ C0] __kasan_slab_free+0x32/0x50 [ 288.382305][ C0] kfree+0x12a/0x3b0 [ 288.384147][ C0] p9_client_create+0x9ca/0x11b0 [ 288.386231][ C0] v9fs_session_init+0x1f8/0x1a80 [ 288.388430][ C0] v9fs_mount+0xc6/0xaa0 [ 288.390288][ C0] legacy_get_tree+0x109/0x220 [ 288.392173][ C0] vfs_get_tree+0x8f/0x380 [ 288.393908][ C0] path_mount+0x6e1/0x1f10 [ 288.395633][ C0] __ia32_sys_mount+0x292/0x310 [ 288.397511][ C0] __do_fast_syscall_32+0x73/0x120 [ 288.410479][ C0] do_fast_syscall_32+0x32/0x80 [ 288.412691][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.415541][ C0] [ 288.441894][ C0] The buggy address belongs to the object at ffff888028057400 [ 288.441894][ C0] which belongs to the cache kmalloc-512 of size 512 [ 288.448021][ C0] The buggy address is located 24 bytes inside of [ 288.448021][ C0] freed 512-byte region [ffff888028057400, ffff888028057600) [ 288.453273][ C0] [ 288.474370][ C0] The buggy address belongs to the physical page: [ 288.477209][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28054 [ 288.480889][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 288.484447][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 288.487341][ C0] page_type: 0xfdffffff(slab) [ 288.489042][ C0] raw: 00fff00000000040 ffff888015442c80 ffffea0001964500 dead000000000002 [ 288.517558][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 288.523219][ C0] head: 00fff00000000040 ffff888015442c80 ffffea0001964500 dead000000000002 [ 288.533834][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 288.544126][ C0] head: 00fff00000000002 ffffea0000a01501 ffffffffffffffff 0000000000000000 [ 288.571708][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 288.575842][ C0] page dumped because: kasan: bad access detected [ 288.578760][ C0] page_owner tracks the page as allocated [ 288.581118][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6832, tgid 6832 (syz-executor), ts 253321524657, free_ts 247685222136 [ 288.608683][ C0] post_alloc_hook+0x2d1/0x350 [ 288.622958][ C0] get_page_from_freelist+0x1351/0x2e50 [ 288.625267][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 288.627454][ C0] alloc_slab_page+0x4e/0xf0 [ 288.629367][ C0] new_slab+0x84/0x260 [ 288.649395][ C0] ___slab_alloc+0xdac/0x1870 [ 288.651516][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 288.654015][ C0] __kmalloc_noprof+0x379/0x410 [ 288.656262][ C0] fib6_info_alloc+0x40/0x160 [ 288.672796][ C0] ip6_route_info_create+0x337/0x1ad0 [ 288.675203][ C0] ip6_route_add+0x26/0x190 [ 288.678618][ C0] addrconf_add_mroute+0x1de/0x350 [ 288.682528][ C0] addrconf_add_dev+0x14e/0x1c0 [ 288.694317][ C0] inet6_addr_add+0x1a8/0xbe0 [ 288.697008][ C0] inet6_rtm_newaddr+0x11ea/0x1ac0 [ 288.701454][ C0] rtnetlink_rcv_msg+0x3c7/0xea0 [ 288.714695][ C0] page last free pid 5307 tgid 5307 stack trace: [ 288.731142][ C0] free_unref_page+0x64a/0xe40 [ 288.733563][ C0] __put_partials+0x14c/0x170 [ 288.736063][ C0] qlist_free_all+0x4e/0x140 [ 288.738522][ C0] kasan_quarantine_reduce+0x192/0x1e0 [ 288.741444][ C0] __kasan_slab_alloc+0x69/0x90 [ 288.743854][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 288.746250][ C0] __alloc_skb+0x2b3/0x380 [ 288.755621][ C0] alloc_skb_with_frags+0xe4/0x710 [ 288.757711][ C0] sock_alloc_send_pskb+0x7f1/0x980 [ 288.763440][ C0] mld_newpack.isra.0+0x1d4/0x7e0 [ 288.766149][ C0] add_grhead+0x299/0x340 [ 288.790351][ C0] add_grec+0x111e/0x1670 [ 288.792344][ C0] mld_send_initial_cr.part.0+0xe2/0x260 [ 288.794936][ C0] mld_dad_work+0x51/0x2f0 [ 288.796874][ C0] process_one_work+0x958/0x1ad0 [ 288.799091][ C0] worker_thread+0x6c8/0xf20 [ 288.801176][ C0] [ 288.802185][ C0] Memory state around the buggy address: [ 288.827652][ C0] ffff888028057300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.831324][ C0] ffff888028057380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.834887][ C0] >ffff888028057400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.838446][ C0] ^ [ 288.840671][ C0] ffff888028057480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.868392][ C0] ffff888028057500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.872062][ C0] ================================================================== [ 288.875668][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 288.907001][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 288.911697][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.916751][ C0] Workqueue: events_unbound toggle_allocation_gate [ 288.928183][ C0] Call Trace: [ 288.930072][ C0] [ 288.931783][ C0] dump_stack_lvl+0x3d/0x1f0 [ 288.934519][ C0] panic+0x6f5/0x7a0 [ 288.946869][ C0] ? __pfx_panic+0x10/0x10 [ 288.949886][ C0] ? rcu_is_watching+0x12/0xc0 [ 288.953089][ C0] ? __pfx_lock_release+0x10/0x10 [ 288.958012][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 288.960718][ C0] check_panic_on_warn+0xab/0xb0 [ 288.971741][ C0] end_report+0x117/0x180 [ 288.987399][ C0] kasan_report+0xe9/0x110 [ 288.990051][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 288.993033][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 288.995998][ C0] __lock_acquire+0x2de0/0x3cb0 [ 288.998729][ C0] ? try_to_wake_up+0x5d7/0x13e0 [ 289.015648][ C0] ? __pfx_lock_release+0x10/0x10 [ 289.018514][ C0] ? rcu_is_watching+0x12/0xc0 [ 289.021526][ C0] ? __smp_call_single_queue+0x174/0x1e0 [ 289.025169][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 289.028648][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 289.032095][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 289.051717][ C0] lock_acquire+0x1b1/0x560 [ 289.054578][ C0] ? p9_req_put+0xca/0x250 [ 289.057357][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 289.060515][ C0] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 289.065792][ C0] ? select_task_rq_fair+0x360/0x44b0 [ 289.068830][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 289.078649][ C0] ? .slowpath+0x9/0x18 [ 289.084734][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 289.088729][ C0] ? p9_req_put+0xca/0x250 [ 289.098931][ C0] p9_req_put+0xca/0x250 [ 289.102870][ C0] req_done+0x1e7/0x2f0 [ 289.104838][ C0] ? __pfx_req_done+0x10/0x10 [ 289.107060][ C0] ? __pfx_req_done+0x10/0x10 [ 289.109271][ C0] vring_interrupt+0x31b/0x400 [ 289.111565][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 289.138122][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 289.150944][ C0] handle_irq_event+0xab/0x1e0 [ 289.153150][ C0] handle_edge_irq+0x263/0xd10 [ 289.166804][ C0] __common_interrupt+0xdf/0x250 [ 289.169119][ C0] common_interrupt+0x52/0xd0 [ 289.171195][ C0] asm_common_interrupt+0x26/0x40 [ 289.173211][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 289.175680][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 55 82 f6 48 89 df e8 1e d2 82 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 4f 74 f6 65 8b 05 16 06 1d 75 85 c0 74 16 5b [ 289.199358][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000246 [ 289.202210][ C0] RAX: 0000000000000002 RBX: ffff88802c02a880 RCX: 1ffffffff28578ac [ 289.205784][ C0] RDX: 0000000000000000 RSI: ffffffff8b2cd060 RDI: ffffffff8b9084e0 [ 289.226012][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff284b2f7 [ 289.231370][ C0] R10: ffffffff942597bf R11: ffffffff8b2f4a00 R12: 00000000fffff980 [ 289.237144][ C0] R13: 0000000000000000 R14: ffff88802c02a880 R15: 00000000ffffffff [ 289.243357][ C0] __mod_timer+0x8f6/0xdc0 [ 289.249581][ C0] ? __pfx___mod_timer+0x10/0x10 [ 289.261946][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 289.265358][ C0] ? __get_random_u32_below+0x4e/0xa0 [ 289.268525][ C0] call_timer_fn+0x1a0/0x610 [ 289.283755][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 289.286818][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 289.289826][ C0] ? __pfx_lock_release+0x10/0x10 [ 289.292155][ C0] ? mark_held_locks+0x9f/0xe0 [ 289.294337][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 289.319039][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 289.322437][ C0] __run_timers+0x74b/0xaf0 [ 289.334262][ C0] ? __pfx___run_timers+0x10/0x10 [ 289.336663][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 289.350204][ C0] run_timer_base+0x111/0x190 [ 289.352343][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 289.354767][ C0] run_timer_softirq+0x1a/0x40 [ 289.363748][ C0] handle_softirqs+0x216/0x8f0 [ 289.368823][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 289.371494][ C0] irq_exit_rcu+0xbb/0x120 [ 289.373298][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 289.388544][ C0] [ 289.390108][ C0] [ 289.391765][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.395059][ C0] RIP: 0010:smp_call_function_many_cond+0x4ec/0x1420 [ 289.400224][ C0] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 9b 2c 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 289.434414][ C0] RSP: 0018:ffffc900003d7910 EFLAGS: 00000293 [ 289.437709][ C0] RAX: 0000000000000000 RBX: ffff88802c244bc0 RCX: ffffffff817eef4b [ 289.442157][ C0] RDX: ffff888015f2a440 RSI: ffffffff817eef25 RDI: 0000000000000005 [ 289.449091][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 289.458215][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1005848979 [ 289.479819][ C0] R13: 0000000000000001 R14: ffff88802c244bc8 R15: ffff88802c040000 [ 289.495966][ C0] ? smp_call_function_many_cond+0x50b/0x1420 [ 289.499436][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 289.502341][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 289.505138][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 289.518356][ C0] ? __pfx___text_poke+0x10/0x10 [ 289.520632][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 289.535089][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 289.537925][ C0] text_poke_bp_batch+0x561/0x760 [ 289.540485][ C0] ? __kmalloc_node_track_caller_noprof+0xe5/0x440 [ 289.559842][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 289.562940][ C0] ? __jump_label_patch+0x1db/0x400 [ 289.566023][ C0] ? text_poke_queue+0xef/0x180 [ 289.568837][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 289.572663][ C0] text_poke_finish+0x30/0x40 [ 289.575761][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 289.591970][ C0] jump_label_update+0x1d7/0x400 [ 289.594756][ C0] static_key_disable_cpuslocked+0x154/0x1c0 [ 289.597962][ C0] static_key_disable+0x1a/0x20 [ 289.601166][ C0] toggle_allocation_gate+0x143/0x250 [ 289.604579][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 289.624126][ C0] process_one_work+0x958/0x1ad0 [ 289.627195][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 289.630681][ C0] ? __pfx_process_one_work+0x10/0x10 [ 289.634164][ C0] ? assign_work+0x1a0/0x250 [ 289.637078][ C0] worker_thread+0x6c8/0xf20 [ 289.640082][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.643355][ C0] kthread+0x2c1/0x3a0 [ 289.659786][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.662777][ C0] ? __pfx_kthread+0x10/0x10 [ 289.664956][ C0] ret_from_fork+0x45/0x80 [ 289.667512][ C0] ? __pfx_kthread+0x10/0x10 [ 289.670521][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.673712][ C0] [ 289.691904][ C0] Kernel Offset: disabled [ 289.694862][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:37:54 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff84f9b050 RDI=ffffffff94dc0100 RBP=ffffffff94dc00c0 RSP=ffffc90000007090 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=ffffffff94dc00c0 R14=ffffffff94dc0110 R15=0000000000000058 RIP=ffffffff84f9b077 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7492040 CR3=000000000d97c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900005a8528 RCX=ffffffff813c7c26 RDX=ffff8880163ba440 RSI=ffffffff813c7d59 RDI=0000000000000005 RBP=ffffc90000467f00 RSP=ffffc900005a8460 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900005a8530 R13=ffffc900005a8538 R14=ffffc90000460000 R15=0000000000000001 RIP=ffffffff813c7d59 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5d8661c CR3=000000000d97c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffffffff1b01e76 RBX=0000000000000000 RCX=ffffffff819a4092 RDX=ffff8880221e0000 RSI=ffffffff819981b0 RDI=ffffffff8d80f3b0 RBP=0000000000000000 RSP=ffffc90004ae7278 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000f71b8093 R13=dffffc0000000000 R14=ffffc90004ae73e0 R15=ffff8880221e0000 RIP=ffffffff819981d8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7494f6c CR3=0000000018ab4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=1ffff11004060a75 RDX=0000000000020000 RSI=0000000000000021 RDI=ffff8880203053d4 RBP=0000000000000000 RSP=ffffc90006c778e8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000a R11=0000000000000002 R12=0000000000000000 R13=ffff8880203053b0 R14=0000000000000021 R15=ffff888020304880 RIP=ffffffff8168ec3a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f742a230 CR3=00000000260ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000